Description
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: 2022-10-14
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-41611 A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
History

Thu, 15 May 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Ikea Tradfri Gateway E1526 Tradfri Gateway E1526 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: SNPS

Published:

Updated: 2025-05-15T13:46:29.965Z

Reserved: 2022-08-31T00:00:00.000Z

Link: CVE-2022-39065

cve-icon Vulnrichment

Updated: 2024-08-03T11:10:32.391Z

cve-icon NVD

Status : Modified

Published: 2022-10-14T16:15:19.243

Modified: 2025-05-15T14:15:25.430

Link: CVE-2022-39065

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses