CVE-2018-15720

CVE-2018-15720

Vendor Logitech

Product Logitech Harmony Hub

Weakness CWE-798 · Hardcoded credentials

Published December 20, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.

Key dates

02Disclosure timeline

December 20, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-15720 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/798.html

Related vulnerabilities

04Related CVE

CVE-2024-39374 Use of Hard-coded Credentials in TELSAT marKoni FM Transmitter CVE-2024-3408 Authentication Bypass and RCE in man-group/dtale CVE-2019-5139 CVE-2025-2765 CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials