What’s Vulnerable › Vulnerabilities

CVE-2019-15913

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-20 · updated 2026-06-17
• Weakness: CWE-639

Description

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive information and denial of service attack, take over smart home devices, and tamper with messages.

Affected products

• Mi Dgnwg03Lm Firmware: all versions
• Mi Mccgq01Lm Firmware: all versions
• Mi Rtcgq01Lm Firmware: all versions
• Mi Wsdcgq01Lm Firmware: all versions
• Mi Zncz03Lm Firmware: all versions

References

• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15913.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15913.md

Get alerted when CVE-2019-15913 or the next vulnerability affects your stack