Logitech Harmony Hub Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Logitech Harmony Hub Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-15720 — CVSS 9.8 (critical): Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the…
• CVE-2018-15721 — CVSS 9.8 (critical): The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote…
• CVE-2018-15723 — CVSS 9.8 (critical): The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An…
• CVE-2018-15722 — CVSS 8.1 (high): The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man…