PT-2019-14467
CVE-2019-15913
·
تاريخ النشر
2019-12-20
·
تاريخ التحديث
2020-01-03
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Xiaomi DGNWG03LM version
Xiaomi ZNCZ03LM version
Xiaomi MCCGQ01LM version
Xiaomi WSDCGQ01LM version
Xiaomi RTCGQ01LM version
Description
The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain sensitive information, launch denial of service attacks, take over smart home devices, and tamper with messages.
Recommendations
For Xiaomi DGNWG03LM, update the device to a version that addresses the insecure key transport issue.
For Xiaomi ZNCZ03LM, update the device to a version that addresses the insecure key transport issue.
For Xiaomi MCCGQ01LM, update the device to a version that addresses the insecure key transport issue.
For Xiaomi WSDCGQ01LM, update the device to a version that addresses the insecure key transport issue.
For Xiaomi RTCGQ01LM, update the device to a version that addresses the insecure key transport issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾