CVE Feed

    Dashboard / CVE / CVE-2022-39065

    CVE-2022-39065

    A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

    Published:Oct 14, 2022
    Last Modified:May 15, 2025
    EPS:Oct 14, 2022
    EPSS Score:0.00063
    CVSS Score:6.5

    Affected Products

    Vendor
    Ikea
    Product
    Tradfri Gateway E1526
    Vendor
    Ikea
    Product
    Tradfri Gateway E1526 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-48 Passing Local Filenames to Functions That Expect a URL

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High