Mi ZNCZ03LM Firmware vulnerabilities

3 CVEs affecting Mi ZNCZ03LM Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15915, published 2019-12-20.

More from Mi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-15914, published 2019-12-20. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service…
• CVE-2019-15913, published 2019-12-20. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive…
• CVE-2019-15915, published 2019-12-20. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.