CVE-2019-15913: Authorization Bypass Through User-Controlled Key

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages...

PT-2019-14467

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM version Xiaomi ZNCZ03LM version Xiaomi MCCGQ01LM version Xiaomi WSDCGQ01LM version Xiaomi RTCGQ01LM version Description The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain...

PT-2019-14468

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices affected versions not specified Description An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure...

CVE-2019-15914: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...