Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

Siemens SENTRON 3NA COM Fuse before 5.2 can be forced into DoS

Original title: Siemens SENTRON 3NA COM Fuse

CISA Advisoriesby CISA ()3 min read1
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

An unsolicited encrypted ZigBee rejoin response can change the node ID; recovery requires rebuilding the network.

CISA republished Siemens ProductCERT advisory SSA-099819 on SENTRON 3NA COM Fuse versions before V5.2. CVE-2024-7322 is improper verification of a communication channel: a ZigBee coordinator, router, or end device may change its node ID after an unsolicited encrypted rejoin response, causing denial of service. Siemens provides a fix in V5.2 or later. The advisory does not report exploitation.

Key facts
  • CVE-2024-7322 has CVSS 3.1 base score 5.8 (medium).
  • Affected product is SENTRON 3NA COM Fuse before V5.2.
  • The vendor fix is V5.2 or later.
  • CISA's initial republication is dated October 22; Siemens published October 13.
  • Relevant weakness is CWE-940.
Security assessment · AI, from the article

Impact: Denial of service until the network is re-established

ProductAffectedFixed in
Siemens SENTRON 3NA COM Fuse< V5.2V5.2 or later
What to do
  1. 1.Update SENTRON 3NA COM Fuse to V5.2 or later.
  2. 2.Protect network access to the devices and follow Siemens industrial security guidelines.
Analyze CVE-2024-7322 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2024-7322
ATT&CK
T1499 Endpoint Denial of Service
Tags
siemenssentronicszigbeedenial-of-service
Vendors
Siemens
Products
SENTRON 3NA COM Fuse
Organizations
CISASiemens ProductCERT

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-7322
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes…
5.8<1%

From the original article

3 min read at cisa.gov

View CSAF Summary SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.