IM
IronMonkey Threat Research

CVE-2024-7322 MEDIUM

Published: 2025-01-15 | Last Modified: 2026-04-20 | Status: Deferred

Description

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

Additional Descriptions (1)

Un coordinador, enrutador o dispositivo final de ZigBee puede cambiar su ID de nodo cuando recibe una respuesta de reincorporación cifrada no solicitada. Este cambio en la ID del nodo provoca una denegación de servicio (DoS). Para recuperarse de esta denegación de servicio, se debe restablecer la red.

CVSS Metrics

Base Score: 5.8 (MEDIUM)

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionNONE
ScopeCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Secondary

Exploitability Score: 1.3

Impact Score: 4.0

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-940
Notification
Message here