CVE-2019-15911
Summary
| CVE | CVE-2019-15911 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-20 17:15:00 UTC |
| Updated | 2020-01-09 16:49:00 UTC |
| Description | An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Asus | As-101 | - | All | All | All |
| Hardware | Asus | As-101 | - | All | All | All |
| Operating System | Asus | As-101 Firmware | - | All | All | All |
| Operating System | Asus | As-101 Firmware | - | All | All | All |
| Hardware | Asus | Dl-101 | - | All | All | All |
| Hardware | Asus | Dl-101 | - | All | All | All |
| Operating System | Asus | Dl-101 Firmware | - | All | All | All |
| Operating System | Asus | Dl-101 Firmware | - | All | All | All |
| Hardware | Asus | Hg100 | - | All | All | All |
| Hardware | Asus | Hg100 | - | All | All | All |
| Operating System | Asus | Hg100 Firmware | - | All | All | All |
| Operating System | Asus | Hg100 Firmware | - | All | All | All |
| Hardware | Asus | Ms-101 | - | All | All | All |
| Hardware | Asus | Ms-101 | - | All | All | All |
| Operating System | Asus | Ms-101 Firmware | - | All | All | All |
| Operating System | Asus | Ms-101 Firmware | - | All | All | All |
| Hardware | Asus | Mw100 | - | All | All | All |
| Hardware | Asus | Mw100 | - | All | All | All |
| Operating System | Asus | Mw100 Firmware | - | All | All | All |
| Operating System | Asus | Mw100 Firmware | - | All | All | All |
| Hardware | Asus | Ts-101 | - | All | All | All |
| Hardware | Asus | Ts-101 | - | All | All | All |
| Operating System | Asus | Ts-101 Firmware | - | All | All | All |
| Operating System | Asus | Ts-101 Firmware | - | All | All | All |
| Hardware | Asus | Ws-101 | - | All | All | All |
| Hardware | Asus | Ws-101 | - | All | All | All |
| Operating System | Asus | Ws-101 Firmware | - | All | All | All |
| Operating System | Asus | Ws-101 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-POC/CVE-2019-15911.md at master · chengcheng227/CVE-POC · GitHub | MISC | github.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.