What’s Vulnerable › Vulnerabilities

CVE-2019-15914

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-20 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

Affected products

• Mi Dgnwg03Lm Firmware: all versions
• Mi Mccgq01Lm Firmware: all versions
• Mi Rtcgq01Lm Firmware: all versions
• Mi Wsdcgq01Lm Firmware: all versions
• Mi Zncz03Lm Firmware: all versions

References

• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md
• https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md

Get alerted when CVE-2019-15914 or the next vulnerability affects your stack