5.8Medium

CVE-2024-7322Dos in ZigBee device due to unsolicited encrypted rejoin response

silabs.com EmberZNet; Siemens SENTRON 3NA COM Fuse Published: (1 year ago)

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Weakness (CWE): CWE-940

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Siemens SENTRON 3NA COM Fuse < V5.2
silabs.com EmberZNet < 7.3.3, 7.4.0 – < 7.4.4

References and patches