Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-7964 Zigbee Coordinator Denial of Service via Malformed 802.15.4 MAC Data Request https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-7964
Post summary
An announcement of a Zigbee Coordinator denial‑of‑service vulnerability caused by malformed 802.15.4 MAC Data Requests.
CVE-2025-7964 After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting… https://www.cve.org/CVERecord?id=CVE-2025-7964
Post summary
The entry discloses that a malformed 802.15.4 MAC Data Request can cause a Zigbee Coordinator to send a network leave request, inadvertently removing a Zigbee router.
🚨 CVE-2025-7964: Zigbee Router Denial of Service (... Malformed 802.15.4 MAC Data Request triggers cascade failure in Zigbee networks, forcing manual recommissioning of route... https://zerodaysignal.com/vulnerability/CVE-2025-7964 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces the discovery of a Zigbee router Denial‑of‑Service vulnerability (CVE‑2025‑7964), describing the trigger (malformed MAC Data Request) but lacking details on exploitation, patches, or PoC.