Command injection

The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands e.g. harmony.system?systeminfo...

PT-2018-13173

Name of the Vulnerable Software and Affected Versions Logitech Harmony Hub versions prior to 4.15.206 Description The issue allows an unauthenticated remote attacker to execute application-defined commands via crafted HTTP requests, potentially leveraging the "harmony.system?systeminfo" endpoint...