PT-2026-5406 · Zigbee · Zigbee

Published 2026-01-30 · Updated 2026-02-02 · CVE-2025-7964

Positive Technologies · (AI Summary)

CVSS v4.0

9.2

Critical

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions Zigbee Router (affected versions not specified)

Description A malformed 802.15.4 MAC Data Request can cause the Zigbee Coordinator to send a ‘network leave’ request to a Zigbee router. This results in the Zigbee Router becoming stuck in a state where it cannot rejoin the network. If a suitable parent is unavailable, end devices will also be unable to rejoin, requiring manual recommissioning of the Zigbee Router to restore functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-229

Related Identifiers

CVE-2025-7964

Affected Products

Zigbee

References · 6

• https://community.silabs.com/068Vm00000dspiL · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7964 · Security Note
• https://twitter.com/0dayPublishing/status/2017258100500115533 · Twitter Post
• https://twitter.com/CVEnew/status/2017264939489226819 · Twitter Post
• https://t.me/poxek/5867 · Telegram Post
• https://t.me/CVEtracker/43287 · Telegram Post