PT-2019-14468 · Xiaomi · Xiaomi Rtcgq01Lm+4

Hsuan-Yu + 3 · Publicado 2019-12-20 · Atualizado 2020-01-03 · CVE-2019-15914

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices (affected versions not specified)

Description An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-15914

Produtos afetados

Xiaomi Dgnwg03Lm

Xiaomi Mccgq01Lm

Xiaomi Rtcgq01Lm

Xiaomi Wsdcgq01Lm

Xiaomi Zncz03Lm

Referências · 3

• 🔥 https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md · Exploit
• 🔥 https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15914 · Nota de Segurança