CVE-2018-15723

9.8 criticalEPSS 3.7%

Critical (9.8) in logitech harmony hub firmware. EPSS 3.7% chance of exploitation in the next 30 days.

The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo).

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2018-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

logitech:harmony_hub_firmware

References

https://www.tenable.com/security/research/tra-2018-47
https://www.tenable.com/security/research/tra-2018-47

Check your stack JSON