TI-2024-03091 Aliases CVE-2024-3297 GHSA-x5mh-xcwg-v34g

Session establishment lock-up during replay of CASE Sigma1 messages

LOW 28CWE-400Published 2024-07-24 · Updated 2024-08-01

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between two devices, as implemented in the Matter protocol versions before Matter 1.1 allows an attacker to replay manipulated CASE Sigma1 messages to make the device unresponsive until the device is power-cycled.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00152 4th percentileScored 2026-11-07

Fix Fixed Matter (Connectivity Standards Alliance): 1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Connectivity Standards Alliance	Matter	before 1.1	1.1	Patch available	CNA

Matter VendorConnectivity Standards Alliance Affected before 1.1 Fixed in 1.1 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:csa-iot:matter:-:::::::*	not specified by NVD	Vulnerable	Csa-iot

cpe:2.3:a:csa-iot:matter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Csa-iot

Remediation

Fix · CNA Matter (Connectivity Standards Alliance) Fixed in 1.1

Timeline

2026-10-02 Threatist record created from CVE-2024-3297
2026-10-03 Alias added: GHSA-x5mh-xcwg-v34g

References

Advisory 1

https://www.bitdefender.com/support/security-advisories/session-establishment-lock-up-during-replay-of-case-sigma1-messages/

TI-2025-35316 A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before… CVSS 3.1MEDIUM 5.7
TI-2025-35315 A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip)… CVSS 3.1MEDIUM 5.7
TI-2025-35314 A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip)… CVSS 3.1MEDIUM 5.7
TI-2025-35313 A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before… CVSS 3.1MEDIUM 5.7
TI-2025-35312 A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru… CVSS 3.1MEDIUM 5.7
TI-2024-03219 In-Fabric Matter Cluster Attribute Disclosure CVSS 3.1LOW 3.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences