What’s Vulnerable › Vulnerabilities

CVE-2019-15912

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-20 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

Affected products

• ASUS As-101 Firmware: all versions
• ASUS Dl-101 Firmware: all versions
• ASUS HG100 firmware: all versions
• ASUS Ms-101 Firmware: all versions
• ASUS Mw100 Firmware: all versions
• ASUS Ts-101 Firmware: all versions
• ASUS Ws-101 Firmware: all versions

References

• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_1.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_2.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_1.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15912_2.md

Get alerted when CVE-2019-15912 or the next vulnerability affects your stack