cnvd - cnvd-2018-26802

CNVD-2018-26802

Vulnerability from cnvd - Published: 2018-12-27

Title

Logitech Harmony Hub命令注入漏洞

Description

Logitech Harmony Hub是美国罗技（Logitech）公司的一款远程遥控器设备。 Logitech Harmony Hub4.15.206之前版本中存在命令注入漏洞，远程攻击者可通过发送特制的HTTP请求利用该漏洞执行应用程序定义的命令（例如，harmony.system?systeminfo）。

Severity

高

Patch Name

Logitech Harmony Hub命令注入漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://support.myharmony.com/en-de/release-notes

Reference

https://www.tenable.com/security/research/tra-2018-47

Impacted products

Name
Logitech Harmony Hub <4.15.206

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-15723"
    }
  },
  "description": "Logitech Harmony Hub\u662f\u7f8e\u56fd\u7f57\u6280\uff08Logitech\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8fdc\u7a0b\u9065\u63a7\u5668\u8bbe\u5907\u3002\n\nLogitech Harmony Hub4.15.206\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u5e94\u7528\u7a0b\u5e8f\u5b9a\u4e49\u7684\u547d\u4ee4\uff08\u4f8b\u5982\uff0charmony.system?systeminfo\uff09\u3002",
  "discovererName": "Joseph Bingham",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.myharmony.com/en-de/release-notes",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-26802",
  "openTime": "2018-12-27",
  "patchDescription": "Logitech Harmony Hub\u662f\u7f8e\u56fd\u7f57\u6280\uff08Logitech\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8fdc\u7a0b\u9065\u63a7\u5668\u8bbe\u5907\u3002\r\n\r\nLogitech Harmony Hub4.15.206\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u5e94\u7528\u7a0b\u5e8f\u5b9a\u4e49\u7684\u547d\u4ee4\uff08\u4f8b\u5982\uff0charmony.system?systeminfo\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Logitech Harmony Hub\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Logitech Harmony Hub \u003c4.15.206"
  },
  "referenceLink": "https://www.tenable.com/security/research/tra-2018-47",
  "serverity": "\u9ad8",
  "submitTime": "2018-12-21",
  "title": "Logitech Harmony Hub\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2018-15723 (GCVE-0-2018-15723)

Vulnerability from cvelistv5 – Published: 2018-12-20 21:00 – Updated: 2024-09-17 02:10

Summary

The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo).

Severity ?

No CVSS data available.

CWE

CWE-346 - Origin Validation Error

Assigner

tenable

References

URL

Tags

https://www.tenable.com/security/research/tra-2018-47

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Logitech	Logitech Harmony Hub	Affected: Firmware before 4.15.206

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:01:54.663Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2018-47"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Logitech Harmony Hub",
          "vendor": "Logitech",
          "versions": [
            {
              "status": "affected",
              "version": "Firmware before 4.15.206"
            }
          ]
        }
      ],
      "datePublic": "2018-12-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346 Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-20T20:57:01",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2018-47"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vulnreport@tenable.com",
          "DATE_PUBLIC": "2018-12-19T00:00:00",
          "ID": "CVE-2018-15723",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Logitech Harmony Hub",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Firmware before 4.15.206"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Logitech"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-346 Origin Validation Error"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tenable.com/security/research/tra-2018-47",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2018-47"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2018-15723",
    "datePublished": "2018-12-20T21:00:00Z",
    "dateReserved": "2018-08-22T00:00:00",
    "dateUpdated": "2024-09-17T02:10:50.517Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-26802

CVE-2018-15723 (GCVE-0-2018-15723)

Tags

Sightings

Nomenclature