CVE-2018-15722CWE-78

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request

published December 20, 2018

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01643 · 76.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2018-12-20T21:00Z
EPSS history
Timeline
  • 20 DEC 21:00Z
    The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request
    cvelistv5