{"id":"CVE-2024-7322","state":"PUBLISHED","title":"Dos in ZigBee device due to unsolicited encrypted rejoin response","description":"A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established","publishedAt":"2025-01-15T07:59:55.430Z","updatedAt":"2026-10-15T00:33:46.461Z","severity":{"score":5.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H","source":"Silabs"},"assigner":"Silabs","products":["silabs.com EmberZNet"],"affected":[{"vendor":"silabs.com","product":"EmberZNet","packageName":"GSDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.3.3","versionType":"semver"},{"version":"7.4.0","status":"affected","lessThan":"7.4.4","versionType":"semver"}]},{"vendor":"silabs.com","product":"EmberZNet","packageName":"SiSDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.1.0","versionType":"semver"}]}],"references":["https://community.silabs.com/068Vm00000I7ri2","https://cert-portal.siemens.com/productcert/html/ssa-099819.html"],"weaknesses":["CWE-940"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7322.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-7322","state":"PUBLISHED","datePublished":"2025-01-15T07:59:55.430Z","dateUpdated":"2026-10-15T00:33:46.461Z","assignerShortName":"Silabs","assignerOrgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateReserved":"2024-07-31T09:01:54.841Z"},"containers":{"cna":{"title":"Dos in ZigBee device due to unsolicited encrypted rejoin response","descriptions":[{"lang":"en","value":"A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"}],"affected":[{"vendor":"silabs.com","product":"EmberZNet","packageName":"GSDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.3.3","versionType":"semver"},{"version":"7.4.0","status":"affected","lessThan":"7.4.4","versionType":"semver"}]},{"vendor":"silabs.com","product":"EmberZNet","packageName":"SiSDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"8.1.0","versionType":"semver"}]}],"references":[{"url":"https://community.silabs.com/068Vm00000I7ri2","tags":["vendor-advisory","permissions-required"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":5.8,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-940","lang":"en","description":"CWE-940 Improper Verification of Source of a Communication Channel","type":"CWE"}]}],"providerMetadata":{"shortName":"Silabs","orgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateUpdated":"2026-04-20T15:10:01.669Z"},"impacts":[{"capecId":"CAPEC-176","descriptions":[{"lang":"en","value":"CAPEC-176 Configuration/Environment Manipulation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-15T14:46:49.430161Z","id":"CVE-2024-7322","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-15T14:46:57.645Z"}},{"affected":[{"vendor":"Siemens","product":"SENTRON 3NA COM Fuse","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V5.2","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099819.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-10-15T00:33:46.461Z"},"x_adpType":"supplier"}]}}}