PT-2018-13171 · Logitech · Logitech Harmony Hub

Publicado 2018-12-20 · Atualizado 2019-10-09 · CVE-2018-15721

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Logitech Harmony Hub versions prior to 4.15.206

Description The issue concerns an authentication bypass vulnerability in the XMPP server of the Logitech Harmony Hub. This vulnerability can be exploited by remote attackers using a crafted XMPP request to gain unauthorized access to the local API.

Recommendations For versions prior to 4.15.206, update to version 4.15.206 or later to resolve the issue.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-15721

Produtos afetados

Logitech Harmony Hub

Referências · 3

• 🔥 https://tenable.com/security/research/tra-2018-47 · Exploit
• https://osv.dev/vulnerability/CVE-2018-15721 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15721 · Nota de Segurança