High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-20	CVE-2018-15723	Unspecified vulnerability in Logitech Harmony HUB Firmware The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. network low complexity logitech	7.5
2018-12-20	CVE-2018-15721	Improper Authentication vulnerability in Logitech Harmony HUB Firmware The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. network low complexity logitech CWE-287	7.5
2018-12-20	CVE-2018-15720	Use of Hard-coded Credentials vulnerability in Logitech Harmony HUB Firmware Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API. network low complexity logitech CWE-798	7.5