CVE-2024-7322

Published: Jan 15, 2025Modified: Oct 15, 2026Deferred

5.8

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Exploitability: 1.3 / Impact: 4.0

Source: product-security@silabs.com (Secondary)

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Related CWEs

CWE-940

Improper Verification of Source of a Communication Channel

The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References (2)

https://community.silabs.com/068Vm00000I7ri2

Source: product-security@silabs.com

https://cert-portal.siemens.com/productcert/html/ssa-099819.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.