CVE-2024-7322: Siemens SENTRON 3NA COM Fuse denial-of-service

CVE-2024-7322 · Severity: high · Published 2026-10-22

Siemens SENTRON 3NA COM Fuse is an industrial power distribution device used in critical infrastructure networks. A denial-of-service vulnerability in its network management message handling could allow an attacker to disable the device, disrupting electrical distribution systems until the network is manually restored. This vulnerability poses a risk to manufacturing, transportation, energy, and healthcare sectors that depend on reliable power distribution.

Vendors: Siemens.

Quick answers

Is CVE-2024-7322 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2024-7322 being exploited in the wild.
How severe is CVE-2024-7322?
High severity, published 22 October 2026.
Which products and versions are affected?
Siemens SENTRON 3NA COM Fuse before 5.2.
Is there a fix for CVE-2024-7322?
Yes: fixed in SENTRON 3NA COM Fuse 5.2 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2024-7322 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-7322?
Check whether you run Siemens SENTRON 3NA COM Fuse at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: SENTRON 3NA COM Fuse 5.2 and later

Technical details

The vulnerability stems from improper verification of the source of a communication channel in SENTRON 3NA COM Fuse, allowing improper handling of crafted network management messages to trigger a denial-of-service condition. An attacker with network access to the affected device can exploit this without authentication. Successful exploitation forces the network to be re-established for recovery.

Affected products

  • Siemens SENTRON 3NA COM Fuse before 5.2

Timeline

  • 2026-10-22: disclosed

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.