CVE-2019-15911

CRITICAL

9.8

Descripcion

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado12/20/2019

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

asus:as-101asus:as-101_firmwareasus:dl-101asus:dl-101_firmwareasus:hg100asus:hg100_firmwareasus:ms-101asus:ms-101_firmwareasus:mw100asus:mw100_firmwareasus:ts-101asus:ts-101_firmwareasus:ws-101asus:ws-101_firmware

Debilidades (CWE)

CWE-319

Referencias

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(cve@mitre.org)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.