Denial of Service Vulnerability in Multiple Xiaomi Products

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

Denial of Service Vulnerability in Multiple Xiaomi Products (CNVD-2020-03067)

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

CVE-2019-15914

Technical details (affected product scope, root cause, exploit specifics, fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor security notices for CVE-2019-15914.

CVE-2019-15913

The CVE-2019-15913 entry affects Xiaomi ZigBee-enabled devices: DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Root cause is insecure key transport in ZigBee communication, allowing an attacker to gain sensitive information, cause denial of service, take over smart home devices, and tampe...

CVE-2019-15915

The CVE-2019-15915 entry concerns Xiaomi devices DGNWG03LM, ZNCZ03LM, MCCGQ01LM, and RTCGQ01LM. The vulnerability arises when attackers use the ZigBee network discovery procedure, enabling a denial-of-service condition. Reported impacts indicate availability is affected (partial impact per CVSS v...

CVE-2019-15915: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

CVE-2019-15913: Authorization Bypass Through User-Controlled Key

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages...

CVE-2019-15914: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...