Skip to content
OpenAdvisories
Critical · 9.2 CVE-2025-7964 EUVD-2025-206576GHSA-mwv3-x6r9-r9c2

Zigbee Router Denial of Service

Published Jan 30, 2026 · Updated Jan 30, 2026 · Assigned by Silabs

Description

After receiving a

malformed 802.15.4 MAC Data Request

the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.

Affected products

VendorProductAffectedFixed
silabs.com Silicon Labs Zigbee Stack ≤ 4.4.6, ≤ 2025.6.1 —

References