CVE-2019-15911

CRITICAL

9.8

Description

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published12/20/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

asus:as-101asus:as-101_firmwareasus:dl-101asus:dl-101_firmwareasus:hg100asus:hg100_firmwareasus:ms-101asus:ms-101_firmwareasus:mw100asus:mw100_firmwareasus:ts-101asus:ts-101_firmwareasus:ws-101asus:ws-101_firmware

Weaknesses (CWE)

CWE-319

References

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(cve@mitre.org)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.