CVE-2024-7322: Dos in ZigBee device due to unsolicited encrypted rejoin response
Published Jan 15, 2025
·Updated
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established
Event History
Jan 15, 2025
CVE Published
via MITRE·07:59 AM
Data Sourced
via MITRE·07:59 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-7322?
The severity of CVE-2024-7322 is medium, with a score of 5.8.
2
What type of vulnerability is CVE-2024-7322?
CVE-2024-7322 is a Denial of Service (DoS) vulnerability affecting ZigBee devices.
3
How do I fix CVE-2024-7322?
To fix CVE-2024-7322, the network must be re-established after the device experiences the DoS.
4
What impact does CVE-2024-7322 have on ZigBee devices?
CVE-2024-7322 causes a change in node ID which results in Denial of Service for ZigBee devices.
5
Who is affected by CVE-2024-7322?
ZigBee coordinators, routers, and end devices are affected by CVE-2024-7322.