CVE-2024-7322

Dos in ZigBee device due to unsolicited encrypted rejoin response

State: Published
Severity: 5.8 Medium
Published: Jan 15, 2025
Updated: Oct 15, 2026
Reserved: Jul 31, 2024

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Scores

CVSS	Score	Vector	Source
3.1	5.8 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H	Silabs

Weaknesses

CWE-940 Improper Verification of Source of a Communication Channel

Affected Products

Product	Versions
EmberZNetsilabs.com	before 7.3.3Affected 7.4.0 to before 7.4.4Affected
EmberZNetsilabs.com	before 8.1.0Affected

References

https://community.silabs.com/068Vm00000I7ri2vendor-advisorypermissions-required
https://cert-portal.siemens.com/productcert/html/ssa-099819.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.