Vulnerability · Published Oct 14, 2022 · Assigned by SNPS
CVE-2022-39065
Medium 6.5
In plain English
A medium-severity security flaw in TRÅDFRI gateway system from Ikea. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Official description
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ikea | TRÅDFRI gateway system | < 1.19.26 |
Weakness: CWE-241 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H