Siemens SENTRON 3NA COM Fuse before 5.2 can be forced into DoS
An unsolicited encrypted ZigBee rejoin response can change the node ID; recovery requires rebuilding the network.
42
Vulnerability1 · 1 read
CVE-2024-7322
- CVSS 3.1
- 5.8 medium
- EPSS
- <1%p23
- Published
- ·
- Modified
Description · NVD
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established
- Weakness
- CWE-940
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H