CVE-2019-15914 - Vulnerability Details - OpenCVE

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mi	Dgnwg03lm Dgnwg03lm Firmware Mccgq01lm Mccgq01lm Firmware Rtcgq01lm Rtcgq01lm Firmware Wsdcgq01lm Wsdcgq01lm Firmware Zncz03lm Zncz03lm Firmware

Configuration 1 [-]

AND

cpe:2.3:o:mi:dgnwg03lm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mi:dgnwg03lm:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:mi:zncz03lm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mi:zncz03lm:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:mi:mccgq01lm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mi:mccgq01lm:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:mi:wsdcgq01lm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mi:wsdcgq01lm:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:mi:rtcgq01lm_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mi:rtcgq01lm:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md
https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-12-20T16:04:14

Updated: 2024-08-05T01:03:32.589Z

Reserved: 2019-09-04T00:00:00

Link: CVE-2019-15914

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-12-20T17:15:11.643

Modified: 2024-11-21T04:29:43.117

Link: CVE-2019-15914

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-20T17:03:56", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-15914", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md", "refsource": "MISC", "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"name": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md", "refsource": "MISC", "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T01:03:32.589Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-15914", "datePublished": "2019-12-20T16:04:14", "dateReserved": "2019-09-04T00:00:00", "dateUpdated": "2024-08-05T01:03:32.589Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:dgnwg03lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "18E6AAD6-8A61-4E16-8387-ADEDD63BA7DC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:dgnwg03lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFD6A160-4E8B-485F-8EC1-C4D52F002875", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:zncz03lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "454AB732-27E3-412E-AD89-3D62C98B06D3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:zncz03lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "833C0FBE-F3DC-4D28-A996-17E485592046", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:mccgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A01F6B64-4DDA-4E51-A9C7-1C6E3E537156", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:mccgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "44AB28D7-A56F-411C-A6EF-7DB42234EDA5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:wsdcgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC2BB24-C436-4862-BB7E-0546430753FF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:wsdcgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "456AE601-26F7-4DB0-9FBE-47D171B20AEC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:rtcgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1ED2FDB-6F55-4FD2-AE4D-E094D875D189", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:rtcgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF98F7C8-9B48-4594-AECA-E044268CDDBA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en los dispositivos Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Los atacantes pueden utilizar el procedimiento de reincorporaci\u00f3n del centro de confianza ZigBee para realizar m\u00faltiples ataques de denegaci\u00f3n de servicio."}], "id": "CVE-2019-15914", "lastModified": "2024-11-21T04:29:43.117", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-20T17:15:11.643", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}