Vulnerability-Lookup

CVE-2024-7322 (GCVE-0-2024-7322)

Vulnerability from cvelistv5 – Published: 2025-01-15 07:59 – Updated: 2026-10-15 00:33

Title

Dos in ZigBee device due to unsolicited encrypted rejoin response

Summary

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-15 14:46 UTC

CWE

CWE-940 - Improper Verification of Source of a Communication Channel

Assigner

Silabs CNA under the mitre root

CNA scorecard B 84/100 over 41 records in the last 180 days details

References

2 references

URL	Tags
https://community.silabs.com/068Vm00000I7ri2	vendor-advisorypermissions-required
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version	CPE status
silabs.com	EmberZNet	Affected: 0 , < 7.3.3 (semver) Affected: 7.4.0 , < 7.4.4 (semver)	guessed
silabs.com	EmberZNet	Affected: 0 , < 8.1.0 (semver)	guessed
Siemens	SENTRON 3NA COM Fuse	Affected: 0 , < V5.2 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-7322",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T14:46:49.430161Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-15T14:46:57.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SENTRON 3NA COM Fuse",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T00:33:46.461Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-099819.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "GSDK",
          "product": "EmberZNet",
          "vendor": "silabs.com",
          "versions": [
            {
              "lessThan": "7.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.4.4",
              "status": "affected",
              "version": "7.4.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "SiSDK",
          "product": "EmberZNet",
          "vendor": "silabs.com",
          "versions": [
            {
              "lessThan": "8.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u0026nbsp;in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
            }
          ],
          "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u00a0in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-176",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-176 Configuration/Environment Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-940",
              "description": "CWE-940 Improper Verification of Source of a Communication Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-20T15:10:01.669Z",
        "orgId": "030b2754-1501-44a4-bef8-48be86a33bf4",
        "shortName": "Silabs"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "permissions-required"
          ],
          "url": "https://community.silabs.com/068Vm00000I7ri2"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Dos in ZigBee device due to unsolicited encrypted rejoin response",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4",
    "assignerShortName": "Silabs",
    "cveId": "CVE-2024-7322",
    "datePublished": "2025-01-15T07:59:55.430Z",
    "dateReserved": "2024-07-31T09:01:54.841Z",
    "dateUpdated": "2026-10-15T00:33:46.461Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-7322",
      "date": "2026-10-28",
      "epss": "0.00341",
      "percentile": "0.27549"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "packageName": "GSDK",
                "product": "EmberZNet",
                "vendor": "silabs.com",
                "versions": [
                  {
                    "lessThan": "7.3.3",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "7.4.4",
                    "status": "affected",
                    "version": "7.4.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "packageName": "SiSDK",
                "product": "EmberZNet",
                "vendor": "silabs.com",
                "versions": [
                  {
                    "lessThan": "8.1.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "product-security@silabs.com"
          },
          {
            "affectedData": [
              {
                "defaultStatus": "unknown",
                "product": "SENTRON 3NA COM Fuse",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V5.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u00a0in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
          },
          {
            "lang": "es",
            "value": "Un coordinador, enrutador o dispositivo final de ZigBee puede cambiar su ID de nodo cuando recibe una respuesta de reincorporaci\u00f3n cifrada no solicitada. Este cambio en la ID del nodo provoca una denegaci\u00f3n de servicio (DoS). Para recuperarse de esta denegaci\u00f3n de servicio, se debe restablecer la red."
          }
        ],
        "id": "CVE-2024-7322",
        "lastModified": "2026-10-15T01:19:23.157",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 5.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.3,
              "impactScore": 4.0,
              "source": "product-security@silabs.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-7322",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T14:46:49.430161Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-01-15T08:15:26.177",
        "references": [
          {
            "source": "product-security@silabs.com",
            "url": "https://community.silabs.com/068Vm00000I7ri2"
          },
          {
            "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-099819.html"
          }
        ],
        "sourceIdentifier": "product-security@silabs.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-940"
              }
            ],
            "source": "product-security@silabs.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T19:59:53+00:00",
      "cve": "CVE-2024-7322",
      "id": "CVE-2024-7322",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Dos in ZigBee device due to unsolicited encrypted rejoin response",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7322.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "defaultStatus": "unknown",
                "product": "SENTRON 3NA COM Fuse",
                "vendor": "Siemens",
                "versions": [
                  {
                    "lessThan": "V5.2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-15T00:33:46.461Z",
              "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
              "shortName": "siemens-SADP"
            },
            "references": [
              {
                "url": "https://cert-portal.siemens.com/productcert/html/ssa-099819.html"
              }
            ],
            "x_adpType": "supplier"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-7322",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-01-15T14:46:49.430161Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-01-15T14:46:53.752Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "GSDK",
              "product": "EmberZNet",
              "vendor": "silabs.com",
              "versions": [
                {
                  "lessThan": "7.3.3",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.4.4",
                  "status": "affected",
                  "version": "7.4.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "packageName": "SiSDK",
              "product": "EmberZNet",
              "vendor": "silabs.com",
              "versions": [
                {
                  "lessThan": "8.1.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u0026nbsp;in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
                }
              ],
              "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u00a0in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-176",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-176 Configuration/Environment Manipulation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 5.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-940",
                  "description": "CWE-940 Improper Verification of Source of a Communication Channel",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-20T15:10:01.669Z",
            "orgId": "030b2754-1501-44a4-bef8-48be86a33bf4",
            "shortName": "Silabs"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory",
                "permissions-required"
              ],
              "url": "https://community.silabs.com/068Vm00000I7ri2"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Dos in ZigBee device due to unsolicited encrypted rejoin response",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4",
        "assignerShortName": "Silabs",
        "cveId": "CVE-2024-7322",
        "datePublished": "2025-01-15T07:59:55.430Z",
        "dateReserved": "2024-07-31T09:01:54.841Z",
        "dateUpdated": "2026-10-15T00:33:46.461Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2024-7322

Vulnerability from fkie_nvd - Published: 2025-01-15 08:15 - Updated: 2026-10-15 01:19

Severity

5.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Summary

References

	URL	Tags
	product-security@silabs.com	https://community.silabs.com/068Vm00000I7ri2
	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	https://cert-portal.siemens.com/productcert/html/ssa-099819.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "packageName": "GSDK",
          "product": "EmberZNet",
          "vendor": "silabs.com",
          "versions": [
            {
              "lessThan": "7.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.4.4",
              "status": "affected",
              "version": "7.4.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "SiSDK",
          "product": "EmberZNet",
          "vendor": "silabs.com",
          "versions": [
            {
              "lessThan": "8.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "product-security@silabs.com"
    },
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "SENTRON 3NA COM Fuse",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u00a0in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
    },
    {
      "lang": "es",
      "value": "Un coordinador, enrutador o dispositivo final de ZigBee puede cambiar su ID de nodo cuando recibe una respuesta de reincorporaci\u00f3n cifrada no solicitada. Este cambio en la ID del nodo provoca una denegaci\u00f3n de servicio (DoS). Para recuperarse de esta denegaci\u00f3n de servicio, se debe restablecer la red."
    }
  ],
  "id": "CVE-2024-7322",
  "lastModified": "2026-10-15T01:19:23.157",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 4.0,
        "source": "product-security@silabs.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7322",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-01-15T14:46:49.430161Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-01-15T08:15:26.177",
  "references": [
    {
      "source": "product-security@silabs.com",
      "url": "https://community.silabs.com/068Vm00000I7ri2"
    },
    {
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-099819.html"
    }
  ],
  "sourceIdentifier": "product-security@silabs.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-940"
        }
      ],
      "source": "product-security@silabs.com",
      "type": "Secondary"
    }
  ]
}

GHSA-3FCC-QFQW-WQR5

Vulnerability from github – Published: 2025-01-15 09:30 – Updated: 2026-10-15 03:34

Details

Severity

5.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-7322"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-346",
      "CWE-940"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-15T08:15:26Z",
    "severity": "MODERATE"
  },
  "details": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change\u00a0in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established",
  "id": "GHSA-3fcc-qfqw-wqr5",
  "modified": "2026-10-15T03:34:24Z",
  "published": "2025-01-15T09:30:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7322"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-099819.html"
    },
    {
      "type": "WEB",
      "url": "https://community.silabs.com/068Vm00000I7ri2"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

ICSA-26-027-03

Vulnerability from csaf_cisa - Published: 2026-01-13 08:00 - Updated: 2026-01-27 20:13

Summary

Schneider Electric Zigbee Products

Scope

5 vulnerabilities in this advisory, including CVE-2024-7322.

CVE-2024-7322

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when a malicious device joins the network.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Known affected: 34 products

Open the full advisory

ICSA-26-295-05

Vulnerability from csaf_cisa - Published: 2026-10-13 00:00 - Updated: 2026-10-22 06:00

Summary

Siemens SENTRON 3NA COM Fuse

Scope

1 vulnerability in this advisory, including CVE-2024-7322.

CVE-2024-7322

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Known affected: 1 product

https://support.industry.siemens.com/cs/ww/en/view/109797242/

Open the full advisory

NCSC-2026-0415

Vulnerability from csaf_ncscnl - Published: 2026-10-13 09:43 - Updated: 2026-10-13 09:43

Summary

Kwetsbaarheden verholpen in Siemens-producten

Scope

41 vulnerabilities in this advisory, including CVE-2024-7322.

CVE-2024-7322

ZigBee devices are vulnerable to denial of service through unsolicited encrypted rejoin responses causing node ID changes and uncontrolled resource consumption from malicious device joins exploiting a CWE-400 vulnerability.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Known affected: 235 products

Open the full advisory

SEVD-2026-013-03

Vulnerability from csaf_se - Published: 2026-01-13 08:00 - Updated: 2026-01-13 08:00

Summary

Multiple Vulnerabilities on Zigbee Products

Scope

5 vulnerabilities in this advisory, including CVE-2024-7322.

CVE-2024-7322

A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when a malicious device joins the network.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Known affected: 34 products

Open the full advisory

SSA-099819

Vulnerability from csaf_siemens - Published: 2026-10-13 00:00 - Updated: 2026-10-13 00:00

Summary

SSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM Fuse

Scope

1 vulnerability in this advisory, including CVE-2024-7322.

CVE-2024-7322

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Known affected: 1 product

https://support.industry.siemens.com/cs/ww/en/view/109797242/

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-7322 (GCVE-0-2024-7322)

FKIE_CVE-2024-7322

GHSA-3FCC-QFQW-WQR5

ICSA-26-027-03

ICSA-26-295-05

NCSC-2026-0415

SEVD-2026-013-03

SSA-099819

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour