CVE-2019-15914

Technical details (affected product scope, root cause, exploit specifics, fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor security notices for CVE-2019-15914.

CVE-2019-15913

The CVE-2019-15913 entry affects Xiaomi ZigBee-enabled devices: DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Root cause is insecure key transport in ZigBee communication, allowing an attacker to gain sensitive information, cause denial of service, take over smart home devices, and tampe...

CVE-2019-15913: Authorization Bypass Through User-Controlled Key

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages...

PT-2019-14467

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM version Xiaomi ZNCZ03LM version Xiaomi MCCGQ01LM version Xiaomi WSDCGQ01LM version Xiaomi RTCGQ01LM version Description The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain...

PT-2019-14468

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices affected versions not specified Description An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure...

CVE-2019-15914: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...