CVE-2019-15911

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-12-20 · updated 2026-06-17
Weakness: CWE-319

Description

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.

Affected products

ASUS As-101 Firmware: all versions
ASUS Dl-101 Firmware: all versions
ASUS HG100 firmware: all versions
ASUS Ms-101 Firmware: all versions
ASUS Mw100 Firmware: all versions
ASUS Ts-101 Firmware: all versions
ASUS Ws-101 Firmware: all versions

References

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md
https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15911.md

Get alerted when CVE-2019-15911 or the next vulnerability affects your stack