CVE-2024-7322

Name of the Vulnerable Software and Affected Versions ZigBee (affected versions not specified)

Description A ZigBee coordinator, router, or end device may change its node ID when it receives an unsolicited encrypted rejoin response. This change in node ID causes a Denial of Service (DoS). To recover from this DoS, the network must be re-established.

Recommendations To resolve the issue, the network must be re-established after a Denial of Service (DoS) occurs. As a temporary workaround, consider disabling the reception of unsolicited encrypted rejoin responses until a fix is available. Restrict access to the network to minimize the risk of exploitation.