Siemens SENTRON 3NA COM Fuse
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-05.json"><strong>View CSAF</strong></a></p>
<h2>Summary</h2>
<p><strong>SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation.</strong></p>
<p>The following versions of Siemens SENTRON 3NA COM Fuse are affected:</p>
<ul>
<li>SENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322)</li>
</ul>
<div class="csaf-table">
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
<th role="columnheader">Vendor</th>
<th role="columnheader">Equipment</th>
</tr>
</thead>
<tbody>
<tr>
<td>v3 5.8</td>
<td>Siemens</td>
<td>SENTRON 3NA COM Fuse</td>
</tr>
</tbody>
</table>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>
</tr>
</thead>
<tbody>
<tr>
<td>Improper Verification of Source of a Communication Channel</td>
</tr>
</tbody>
</table>
</div>
<h3>Background</h3>
<ul>
<li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities</li>
<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
<li><strong>Company Headquarters Location: </strong>Germany</li>
</ul>
<hr>
<h2>Vulnerabilities</h2>
<div class="c-expandable-textbox icsa-etb">
<div class="c-expandable-textbox__title">CVE-2024-7322</div>
<div class="c-expandable-textbox__body">A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in no
CRITICAL
Severity & confidence
Source severitycritical
Platform severitycritical
Confidencehigh
Exploitationunknown
CVSS-
Affected
Reporting sources (1)
CISA - Cybersecurity Advisories
Timeline & provenance
Published2026-10-22T18:34:17
Last updated2026-10-25T03:23:38
Ingested2026-10-22T18:34:17
FreshnessNEAR-REAL-TIME
Threat typeexploitation
Recommended action
No recommended action published with this item - review the original source.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a government or cert-grade source (CISA, NCSC, NVD, ENISA, MSRC).
Source type: gov ยท Original: CISA - Cybersecurity Advisories