Medium severity · published Jan 15, 2025
CVE-2024-7322
Dos in ZigBee device due to unsolicited encrypted rejoin response
5.8
CVSS
0.3%
EPSS
No
On KEV
Description
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
EmberZNet · silabs.com
before 7.3.3; 7.4.0 before 7.4.4; before 8.1.0 · source: vendor
S3
SENTRON 3NA COM Fuse · Siemens
before V5.2 · source: CISA
In the news
VulnerabilityMedium
Siemens SENTRON 3NA COM Fuse
View CSAF
Summary
SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.
The following versions of Siemens SENTRON 3NA COM Fuse are affected:
SENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322)
CVSS
Vendor
Equipment
v3 5.8
Siemens
SENTRON 3NA COM Fuse
1 Vulnerability
Improper Verification of Source of a Communication Channel
Background
Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
CVE-2024-7322
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established
Read More
1 Affected Product
SENTRON 3NA COM Fuse < V5.2
Product Status: known_affected
Remediations
Vendor fix Update to V5.2 or later version
Additional Metrics
Relevant CWE: CWE-940 Improper Verification of Source of a Communication Channel
...
Oct 22, 2026·CISA Advisories
