Skip to main content

Improper Verification of Source of a Communication Channel

CVE-2024-7322

Medium
5.8/10

Summary

A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established

  • HIGH
  • NETWORK
  • NONE
  • CHANGED
  • NONE
  • HIGH
  • NONE
  • HIGH

CWE-940 - Improper Verification of Source of a Communication Channel

The software establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References

Advisory Timeline

  • Published