CVE-2022-39065
Medium
Description
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SeverityMedium
CVSS6.5
Exploit probability—
ProductIkea Tradfri Gateway E1526 Firmware
PublishedOct 14, 2022
First seenOct 14, 2022
Weakness typeCWE-241CWE-241
How to fix
Update
- ikea tradfri_gateway_e1526_firmware1.19.26 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ikea tradfri_gateway_e1526_firmware | v < 1.19.26 | 1.19.26 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.