Lucene search

K
cve[email protected]CVE-2019-15914
HistoryDec 20, 2019 - 5:15 p.m.

CVE-2019-15914

2019-12-2017:15:11
CWE-20
web.nvd.nist.gov
34
xiaomi
dgnwg03lm
zncz03lm
mccgq01lm
wsdcgq01lm
rtcgq01lm
zigbee
denial of service
vulnerability
cve-2019-15914

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

Affected configurations

NVD
Node
midgnwg03lm_firmwareMatch-
AND
midgnwg03lmMatch-
Node
mizncz03lm_firmwareMatch-
AND
mizncz03lmMatch-
Node
mimccgq01lm_firmwareMatch-
AND
mimccgq01lmMatch-
Node
miwsdcgq01lm_firmwareMatch-
AND
miwsdcgq01lmMatch-
Node
mirtcgq01lm_firmwareMatch-
AND
mirtcgq01lmMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

Related for CVE-2019-15914