ASUS Ws-101 Firmware vulnerabilities

3 CVEs affecting ASUS Ws-101 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15912, published 2019-12-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-15910, published 2019-12-20. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of…
CVE-2019-15912, published 2019-12-20. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of…
CVE-2019-15911, published 2019-12-20. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain…