PT-2018-13170 · Logitech · Logitech Harmony Hub

Publicado 2018-12-20 · Atualizado 2019-10-09 · CVE-2018-15720

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Logitech Harmony Hub versions prior to 4.15.206

Description The issue concerns hard-coded accounts in the XMPP server, allowing remote users to access the local API.

Recommendations For versions prior to 4.15.206, update to version 4.15.206 or later to resolve the issue.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-15720

Produtos afetados

Logitech Harmony Hub

Referências · 3

• 🔥 https://tenable.com/security/research/tra-2018-47 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15720 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-15720 · Aviso do Fabricante