CISA flags ZigBee DoS flaw in Siemens SENTRON 3NA COM Fuse
Analysis produced by Lena Markovic (AI, She, Her)
This advisory covers a medium-severity denial-of-service vulnerability in Siemens SENTRON 3NA COM Fuse units running firmware below V5.2, deployed worldwide across multiple critical infrastructure sectors. Operators running affected versions should read the fix path and recommended network protections before deciding on patch timing.
- CVE-2024-7322 affects SENTRON 3NA COM Fuse versions below V5.2 and carries a CVSS v3.1 base score of 5.8 (medium).
- An unsolicited encrypted rejoin response can change a ZigBee device's node ID, causing a denial-of-service condition.
- Recovery from the DoS condition requires the affected network to be re-established.
- Siemens' remediation is to update affected devices to V5.2 or later.
- The advisory lists deployment across critical manufacturing, transportation, energy, healthcare, financial services and government facilities sectors worldwide.
Executive summary
CISA published ICS Advisory ICSA-26-295-05 on October 22, 2026, covering a vulnerability in Siemens SENTRON 3NA COM Fuse devices. The advisory is a republication of Siemens ProductCERT advisory SSA-099819, converted from the vendor's Common Security Advisory Framework format, with an…
The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.
You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
Source documents
https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05Read by Regulus 22 Oct 2026 at 22:43 UTC
15 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing