CVE Daily

CVE-2018-15722

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command inj...

High CVSS 8.1

Overview

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.

CWE: CWE-78 Published: 2018-12-20T21:29:00.727
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.1 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags