description: Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.
problem types: CWE-798 Hard-coded credentials
affected:
{
product: Logitech Harmony Hub
vendor: Logitech
versions:
status: affected, version: Firmware before 4.15.206
}