CVE-2010-4301: epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remot...

Security readout for executives and security teams

This is a denial-of-service flaw in older Wireshark releases. A specially crafted ZigBee ZCL packet can make Wireshark loop indefinitely while dissecting traffic. It threatens analyst workstations or packet-review workflows more than production servers, unless affected Wireshark versions are embedded in monitoring processes. Exposure is most likely where Wireshark 1.4.0 or 1.4.1 is still used to inspect ZigBee or ZCL traffic, including legacy analysis workstations or packet-capture review environments. Treat this as a targeted operational risk to security analysis tooling. Prioritize cleanup if the organization handles ZigBee traffic or maintains old forensic, lab, or monitoring images. Mitigation focus: Inventory Wireshark installations and identify versions 1.4.0 and 1.4.1.; Upgrade affected Wireshark installations using Wireshark or OS vendor guidance.; Avoid opening untrusted ZigBee/ZCL captures on affected versions until updated..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.