{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-20T17:03:56", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-15914", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md", "refsource": "MISC", "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"name": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md", "refsource": "MISC", "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-15914", "datePublished": "2019-12-20T16:04:14", "dateReserved": "2019-09-04T00:00:00", "dateUpdated": "2019-12-20T17:03:56", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:dgnwg03lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "18E6AAD6-8A61-4E16-8387-ADEDD63BA7DC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:dgnwg03lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFD6A160-4E8B-485F-8EC1-C4D52F002875", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:zncz03lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "454AB732-27E3-412E-AD89-3D62C98B06D3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:zncz03lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "833C0FBE-F3DC-4D28-A996-17E485592046", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:mccgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A01F6B64-4DDA-4E51-A9C7-1C6E3E537156", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:mccgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "44AB28D7-A56F-411C-A6EF-7DB42234EDA5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:wsdcgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC2BB24-C436-4862-BB7E-0546430753FF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:wsdcgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "456AE601-26F7-4DB0-9FBE-47D171B20AEC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:rtcgq01lm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1ED2FDB-6F55-4FD2-AE4D-E094D875D189", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:rtcgq01lm:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF98F7C8-9B48-4594-AECA-E044268CDDBA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en los dispositivos Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM. Los atacantes pueden utilizar el procedimiento de reincorporaci\u00f3n del centro de confianza ZigBee para realizar m\u00faltiples ataques de denegaci\u00f3n de servicio."}], "id": "CVE-2019-15914", "lastModified": "2020-01-03T14:59:16.153", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-20T17:15:11.643", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}