PT-2019-14468 · Xiaomi · Xiaomi Rtcgq01Lm+4

Hsuan-Yu + 3 · Published 2019-12-20 · Updated 2020-01-03 · CVE-2019-15914

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices (affected versions not specified)

Description An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-15914

Affected Products

Xiaomi Dgnwg03Lm

Xiaomi Mccgq01Lm

Xiaomi Rtcgq01Lm

Xiaomi Wsdcgq01Lm

Xiaomi Zncz03Lm

References · 3

• 🔥 https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md · Exploit
• 🔥 https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15914 · Security Note