CVEvulnerability

CVE-2019-15911

9.8 CRITICAL Published 2019-12-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-319

Description

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

Affected configurations

• asus hg100 firmware • asus mw100 firmware • asus ws-101 firmware • asus ts-101 firmware • asus as-101 firmware • asus ms-101 firmware • asus dl-101 firmware

Related

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References