CVE-2025-7964 - CVE House
Back to Database
Status published Critical CVE-2025-7964

Zigbee Router Denial of Service

Vulnerability Description

After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7964

Credits & Attribution

No credits recorded in the NVD database.

References

More from silabs.com

View All →
CVE-2025-8414
Zigbee Green Power Host Buffer Overflow Vulnerability
Critical 9.4
CVE-2025-7448
Man in the middle (MitM) attack vulnerability in Wi-SUN library
High 8.6
CVE-2025-7432
DPA countermeasures not reseeded under certain conditions
Low 1
CVE-2025-4321
DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets
High 7.1
CVE-2025-3873
Buffer overflow in Si91x crypto APIs
Medium 6

Affected Vendor

Affected Software

Silicon Labs Zigbee Stack
Vulnerable Versions:
0

Timeline

Official Publish: January 30th, 2026
Last Modified: January 30th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-229

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.