CVE-2024-7322CWE-940

CVE-2024-7322

Medium · published January 15, 2025

CVSS v3.1
5.8
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Weakness
CWE-940 · Improper Verification of Source of a Communication Channel
Published
2025-01-15T13:15Z
References (2)
https://community.silabs.com/068Vm00000I7ri2 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-099819.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 15 JAN 07:59Z
    Dos in ZigBee device due to unsolicited encrypted rejoin response
    cvelistv5