CVE Intelligence
Analysis AI-assisted

CVE-2025-7964: Silicon Labs Zigbee Router Non-Rejoinable State via Malformed 802.15.4 MAC Request

CVE-2025-7964 affects Zigbee implementations where a malformed 802.15.4 MAC Data Request leads the Zigbee Coordinator to send a network leave request to a Zigbee Router. The router can then be stuck in a non-rejoinable state, and end devices may be unable to rejoin if no suitable parent is available. The CNA assigned a CVSS 4.0 base score of 9.2, and manual recommissioning is described as the recovery path.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2025-7964 is described in the record as a Zigbee issue in which a malformed 802.15.4 MAC Data Request causes the Zigbee Coordinator to send a 'network leave' request to a Zigbee Router. The router is then left in a non-rejoinable state. The CVE record was published by Silicon Labs as CNA.

Impact

  • The affected Zigbee Router may become stuck in a state from which it cannot rejoin the network.
  • If no suitable parent is available, end devices cannot rejoin.
  • According to the record, a manual recommissioning is required to recover the Zigbee Router.
  • The CNA assigned a CVSS 4.0 base score of 9.2 (critical). The vector indicates high impact on availability of the vulnerable system and of subsequent systems.

Affected products and versions

  • The record does not list any affected products or versions.
  • The vendor reference is a Silicon Labs community page, linked below. Its content was not available in the record, so the affected product lines cannot be confirmed here.

Exploitation status

  • The record shows the CVE is not listed in the CISA KEV catalog.
  • No confirmed exploitation in the wild appears in the sources consulted.

Remediation and mitigation

  • Check the vendor reference at Silicon Labs community for product-specific guidance and any updates.
  • The record provides no fixed version. Treat the absence of a fixed version as unknown, not as the absence of a fix.
  • Plan for manual recommissioning of affected routers if they enter the non-rejoinable state, and ensure operators know the recovery procedure.
  • Review network design so that end devices have alternative suitable parents, reducing the impact of a router that cannot rejoin.

Detection guidance

  • Monitor for unexpected network leave events originating from the coordinator.
  • Watch for routers and end devices that fail to rejoin the network after disruption.
  • Correlate rejoin failures with malformed or unusual 802.15.4 traffic at a high level, without relying on specific payload signatures.

Limitations of the available information

  • No affected product names, versions or fixed versions are given in the record.
  • The EPSS score, SSVC data and KEV details beyond the listing status are not available.
  • The CWE-229 identifier is listed without a name in the record.
  • The vendor reference content was not provided in the record.

Frequently asked questions

What is the main impact of CVE-2025-7964?

According to the record, a malformed 802.15.4 MAC Data Request can cause a Zigbee Router to get stuck in a non-rejoinable state, and end devices may be unable to rejoin if no suitable parent is available. Manual recommissioning is described as the recovery method.

Is CVE-2025-7964 known to be actively exploited?

The record shows the CVE is not listed in the CISA KEV catalog, and no confirmed exploitation in the wild appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.