Silicon Labs ZigBee Devices Denial-of-Service Vulnerability via Unsolicited Encrypted Rejoin Response

A denial-of-service vulnerability has been identified in Silicon Labs ZigBee coordinators, routers, and end devices. When these devices receive an unsolicited encrypted rejoin response, they may unintentionally change their node ID. This alteration leads to a denial-of-service condition, causing disruption in the network. To restore normal operation, the network must be re-established.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, disrupting network communication and requiring a manual re-establishment of the network to restore functionality.