CVE-2019-15914

Technical details (affected product scope, root cause, exploit specifics, fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor security notices for CVE-2019-15914.

CVE-2019-15913

The CVE-2019-15913 entry affects Xiaomi ZigBee-enabled devices: DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Root cause is insecure key transport in ZigBee communication, allowing an attacker to gain sensitive information, cause denial of service, take over smart home devices, and tampe...

CVE-2019-15915

The CVE-2019-15915 entry concerns Xiaomi devices DGNWG03LM, ZNCZ03LM, MCCGQ01LM, and RTCGQ01LM. The vulnerability arises when attackers use the ZigBee network discovery procedure, enabling a denial-of-service condition. Reported impacts indicate availability is affected (partial impact per CVSS v...

CVE-2019-15913: Authorization Bypass Through User-Controlled Key

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages...

CVE-2019-15915: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

CVE-2019-15914: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...