CVE-2024-7322: Dos in ZigBee device due to unsolicited encrypted rejoin response

Severity: medium (CVSS 5.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-15 · updated 2026-10-15
Weakness: CWE-940

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Affected products

Silicon Labs EmberZNet: before 7.3.3; from 7.4.0 before 7.4.4; before 8.1.0 — fixed in 7.3.3, 7.4.4, 8.1.0

How to fix

Upgrade to a fixed version: Silicon Labs EmberZNet 7.3.3, 7.4.4, 8.1.0. Check the vendor advisory for mitigations.

References

https://community.silabs.com/068Vm00000I7ri2
https://cert-portal.siemens.com/productcert/html/ssa-099819.html

Get alerted when CVE-2024-7322 or the next vulnerability affects your stack