CVE-2019-15911

CRITICAL

9.8

Descricao

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado12/20/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

asus:as-101asus:as-101_firmwareasus:dl-101asus:dl-101_firmwareasus:hg100asus:hg100_firmwareasus:ms-101asus:ms-101_firmwareasus:mw100asus:mw100_firmwareasus:ts-101asus:ts-101_firmwareasus:ws-101asus:ws-101_firmware

Fraquezas (CWE)

CWE-319

Referencias

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(cve@mitre.org)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.