Is CVE-2024-7322 known to be exploited?

It is not marked known-exploited in this record.

CVE-2024-7322

Update SENTRON 3NA COM Fuse to V5.2 or later. Protect network access with appropriate mechanisms. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access and ensure VPNs are updated to the most current version. Follow Siemens operational guidelines for Industrial Security.

Quick answers

What is CVE-2024-7322?: Update SENTRON 3NA COM Fuse to V5.2 or later. Protect network access with appropriate mechanisms. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access and ensure VPNs are updated to the most current version. Follow Siemens operational guidelines for Industrial Security.
How severe is CVE-2024-7322?: medium, CVSS 5.8
Is CVE-2024-7322 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2024-7322 be mitigated?: Update SENTRON 3NA COM Fuse to V5.2 or later. Protect network access with appropriate mechanisms. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access and ensure VPNs are updated to the most current version. Follow Siemens operational guidelines for Industrial Security.

CVSS

5.8

Vendor

Siemens

Published

Oct 23, 2026 · 05:14

Patch

Unknown / not confirmed

Affected products

SENTRON 3NA COM Fuse

Mitigation

Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability (CVE-2024-7322)

Siemens SENTRON 3NA COM Fuse devices version 5.2 and earlier contain a Denial-of-Service vulnerability tracked as CVE-2024-7322. The flaw stems from improper verification of the source of a communication channel. An attacker can exploit this by sending an unsolicited encrypted rejoin response, which may cause a ZigBee coordinator, router, or end device to change its node ID, resulting in a DoS condition. Recovery requires the affected network to be re-established. The vulnerability has a CVSS 3.1 base score of 5.8 (MEDIUM) and affects critical infrastructure sectors including Critical Manufacturing, Transportation, Energy, Healthcare, Financial Services, and Government. Siemens ProductCERT reported the issue to CISA, which has published the advisory as a means of increasing visibility.

12m

CVE-2024-7322

Quick answers

Related News

Siemens SENTRON 3NA COM Fuse Denial-of-Service Vulnerability (CVE-2024-7322)