CVE-2024-7322 - Dos in ZigBee device due to unsolicited encrypted rejoin response · CoreCVE

Back Back to CVE browser

MEDIUM

Dos in ZigBee device due to unsolicited encrypted rejoin response

Published Jan 15, 2025

5.8

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Affected products

Vendor Silabs.com Product EmberZNet Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <7.3.3
- Version
  0
  Status
  affected
  Constraints
  <8.1.0
- Version
  7.4.0
  Status
  affected
  Constraints
  <7.4.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<7.3.3
0	affected	<8.1.0
7.4.0	affected	<7.4.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-940

References (2)

https://community.silabs.com/068Vm00000I7ri2
vendor-advisorypermissions-required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48027
Advisory

Link	Providers	Tags
https://community.silabs.com/068Vm00000I7ri2		vendor-advisorypermissions-required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48027		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Silabs

Published Jan 15, 2025

Updated Apr 20, 2026

Reserved Jul 31, 2024

Link CVE-2024-7322

CISA Vulnrichment

Updated Jan 15, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-7322

Severity n/a

Public date n/a

Links CVE-2024-7322

Assigner Silabs

Published Jan 15, 2025

Updated Apr 20, 2026

Exploited since n/a

Link EUVD-2024-48027

EUVD-2024-48027