Denial of Service Vulnerability in ASUS ZigBee PRO Devices
CVE-2019-15910

7.5HIGH

Key Information:

Vendor
Asus
Status
Hg100 Firmware
Vendor
CVE Published:
20 December 2019

Summary

An issue has been identified in various ASUS devices utilizing ZigBee PRO, which allows attackers to exploit the discovery procedure of the ZigBee network. By triggering this process, adversaries can perform denial of service attacks, effectively disrupting network availability and functionality for legitimate users.

References

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.