Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-7964

Zigbee Router Denial of Service

Description

After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

silabs.com Silicon Labs Zigbee Stack

Default version status: unaffected

  • 0 to ≤ 4.4.6affected

silabs.com Silicon Labs Zigbee Stack

Default version status: unaffected

  • 0 to ≤ 2025.6.1affected

References