CVE-2025-7964

After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.

CVSS

No CVSS.

References

Link	Resource
https://community.silabs.com/068Vm00000dspiL

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Después de recibir una 802.15.4 MAC Data Request malformada, el Coordinador Zigbee envía una solicitud de 'abandono de red' al router Zigbee, lo que resulta en que el Router Zigbee queda atascado en un estado no reconectable. Si un padre adecuado no está disponible, los dispositivos finales no podrán reconectarse. Se requiere una reconfiguración manual para recuperar el Router Zigbee.

30 Jan 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-30 16:16

Updated : 2026-04-15 00:35

NVD link : CVE-2025-7964

Mitre link : CVE-2025-7964

CVE.ORG link : CVE-2025-7964

JSON object : View

Products Affected

No product.

CWE

CWE-229

Improper Handling of Values

{"id": "CVE-2025-7964", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "product-security@silabs.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-01-30T16:16:11.960", "references": [{"url": "https://community.silabs.com/068Vm00000dspiL", "source": "product-security@silabs.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "product-security@silabs.com", "description": [{"lang": "en", "value": "CWE-229"}]}], "descriptions": [{"lang": "en", "value": "After receiving a \n\nmalformed 802.15.4 MAC Data Request\n\n the Zigbee Coordinator sends a \u2018network leave\u2019 request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin.\u00a0A manual recommissioning is required to recover the Zigbee Router."}, {"lang": "es", "value": "Despu\u00e9s de recibir una 802.15.4 MAC Data Request malformada, el Coordinador Zigbee env\u00eda una solicitud de 'abandono de red' al router Zigbee, lo que resulta en que el Router Zigbee queda atascado en un estado no reconectable. Si un padre adecuado no est\u00e1 disponible, los dispositivos finales no podr\u00e1n reconectarse. Se requiere una reconfiguraci\u00f3n manual para recuperar el Router Zigbee."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "product-security@silabs.com"}