description: The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.
problem types: CWE-287 Improper Authentication
affected:
{
product: Logitech Harmony Hub
vendor: Logitech
versions:
status: affected, version: Firmware before 4.15.206
}