CVE-2022-39064

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness level. After this attack, all lights are on with full brightness, and a user cannot control the bulbs with either the IKEA Home Smart app or the TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score 7.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-241

Affected software

Vendor	Product	Versions
Ikea	TRÅDFRI smart lighting system	< 2.0.029 >

References

https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting/Third Party Advisory
https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting/Third Party Advisory

Timeline

Published: Oct 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-390656.5A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled wi CVE-2022-390668.8There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an CVE-2022-390676.5There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticate CVE-2022-390686.5There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacke CVE-2022-390695.3There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack CVE-2022-39077.5The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API requests due to the usage o CVE-2022-390709.8There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use t CVE-2022-390717.1There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could over CVE-2022-390725.4There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the S CVE-2022-390739.8There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the CVE-2022-390743.3There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could star CVE-2022-390757.1There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could dele