Denial of Service Vulnerability in Multiple Xiaomi Products (CNVD-2020-03067)

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

Denial of Service Vulnerability in Multiple Xiaomi Products

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

CVE-2019-15914

Technical details (affected product scope, root cause, exploit specifics, fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor security notices for CVE-2019-15914.

CVE-2019-15913

The CVE-2019-15913 entry affects Xiaomi ZigBee-enabled devices: DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Root cause is insecure key transport in ZigBee communication, allowing an attacker to gain sensitive information, cause denial of service, take over smart home devices, and tampe...

CVE-2019-15915

The CVE-2019-15915 entry concerns Xiaomi devices DGNWG03LM, ZNCZ03LM, MCCGQ01LM, and RTCGQ01LM. The vulnerability arises when attackers use the ZigBee network discovery procedure, enabling a denial-of-service condition. Reported impacts indicate availability is affected (partial impact per CVSS v...

PT-2019-14467

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM version Xiaomi ZNCZ03LM version Xiaomi MCCGQ01LM version Xiaomi WSDCGQ01LM version Xiaomi RTCGQ01LM version Description The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain...

CVE-2019-15915: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

PT-2019-14468

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices affected versions not specified Description An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure...

PT-2019-14469

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices affected versions not specified Description An issue allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network procedure". Recommendations At the...

CVE-2019-15913: Authorization Bypass Through User-Controlled Key

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages...

CVE-2019-15914: Improper Input Validation

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...