CVE-2019-15913

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices

published December 20, 2019

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

⚠️ An insecure key transport in ZigBee communication is the gateway for attackers to hijack your smart home devices! 🔥 Think of it like a radio station broadcasting your favorite tunes, but without a secure channel. Anyone with a radio can tune in, and they can even start broadcasting their own ‘music’ — disrupting your playlist and taking over the airwaves! An attacker could intercept sensitive information, cause devices to malfunction, or even take control of your smart home, leading to a chaotic scene. Imagine your smart lights flickering ominously or your thermostat cranking up the heat uncontrollably!

Put simply

Think of it like a radio station broadcasting your favorite tunes, but without a secure channel. Anyone with a radio can tune in, and they can even start broadcasting their own ‘music’ — disrupting your playlist and taking over the airwaves! This vulnerability stems from insecure key transport in ZigBee communication on several Xiaomi devices, enabling attackers to access and manipulate messages transmitted between devices.

What to do

An attacker could intercept sensitive information, cause devices to malfunction, or even take control of your smart home, leading to a chaotic scene. Imagine your smart lights flickering ominously or your thermostat cranking up the heat uncontrollably! It's crucial to patch your devices with any available firmware updates as soon as possible. Additionally, consider segregating your smart home devices on a separate network to limit exposure. Keep an eye on your device settings for any configurations that enhance security. You've got this! With these steps, your smart home will be safer in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01253 · 69.2th percentile
Published
2019-12-20T16:04Z
EPSS history
Timeline
  • 20 DEC 16:04Z
    An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices
    cvelistv5