« Volver al listado

CVE-2024-7322

Estado: AplazadaMedia (5.8)—

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Zigbee — ZigbeeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-7322",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7322",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-15T14:46:49.430161Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "product-security@silabs.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 1.3
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@silabs.com",
      "affectedData": [
        {
          "vendor": "silabs.com",
          "product": "EmberZNet",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "7.3.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "7.4.0",
              "lessThan": "7.4.4",
              "versionType": "semver"
            }
          ],
          "packageName": "GSDK",
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "silabs.com",
          "product": "EmberZNet",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "8.1.0",
              "versionType": "semver"
            }
          ],
          "packageName": "SiSDK",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-15T08:15:26.177",
  "references": [
    {
      "url": "https://community.silabs.com/068Vm00000I7ri2",
      "source": "product-security@silabs.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "product-security@silabs.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-940"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established"
    },
    {
      "lang": "es",
      "value": "Un coordinador, enrutador o dispositivo final de ZigBee puede cambiar su ID de nodo cuando recibe una respuesta de reincorporación cifrada no solicitada. Este cambio en la ID del nodo provoca una denegación de servicio (DoS). Para recuperarse de esta denegación de servicio, se debe restablecer la red."
    }
  ],
  "lastModified": "2026-06-17T08:19:51.223",
  "sourceIdentifier": "product-security@silabs.com"
}