CVEvulnerability
CVE-2019-15914
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-12-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.
Affected configurations
• mi dgnwg03lm firmware
• mi zncz03lm firmware
• mi mccgq01lm firmware
• mi wsdcgq01lm firmware
• mi rtcgq01lm firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md Exploit, Third Party Advisory
- https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md Exploit, Third Party Advisory
- https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md Exploit, Third Party Advisory
- https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md Exploit, Third Party Advisory