CVE-2019-15911

CRITICAL

9.8

Description

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/20/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

asus:as-101asus:as-101_firmwareasus:dl-101asus:dl-101_firmwareasus:hg100asus:hg100_firmwareasus:ms-101asus:ms-101_firmwareasus:mw100asus:mw100_firmwareasus:ts-101asus:ts-101_firmwareasus:ws-101asus:ws-101_firmware

Faiblesses (CWE)

CWE-319

References

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(cve@mitre.org)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.