CVE-2019-15911

CRITICAL

9.8

Beschreibung

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/20/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

asus:as-101asus:as-101_firmwareasus:dl-101asus:dl-101_firmwareasus:hg100asus:hg100_firmwareasus:ms-101asus:ms-101_firmwareasus:mw100asus:mw100_firmwareasus:ts-101asus:ts-101_firmwareasus:ws-101asus:ws-101_firmware

Schwachen (CWE)

CWE-319

Referenzen

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(cve@mitre.org)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.