CVE-2018-15722

—

CVSS 3.0

8.1 high

EPSS

2%p75

Published

Dec 20, 2018 (Dec 20, 2018)

Modified

Jun 17, 2026

Description

The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.

Vendors: logitech
Products: harmony hub firmware
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.