CVE-2019-15913 - An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices

Back Back to CVE browser

CRITICAL

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices

Published Dec 20, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.25%

Description

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6817
Advisory
https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15913.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6817		Advisory
https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15913.md		x_refsource_MISCExploitThird Party Advisory