Lucene search

SNPSCVE-2022-39065

HistoryOct 14, 2022 - 4:15 p.m.

CVE-2022-39065

2022-10-1416:15:19

CWE-241

SNPS

web.nvd.nist.gov

cve-2022-39065

zigbee

ieee 802.15.4

trådfri

gateway

unresponsive

lighting

ikea home smart

remote control

vulnerability

nvd

cvss 3.1

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected configurations

Nvd

Node

ikeatradfri_gateway_e1526_firmwareRange<1.19.26

AND

ikeatradfri_gateway_e1526Match-

VendorProductVersionCPE
ikeatradfri_gateway_e1526_firmware*cpe:2.3:o:ikea:tradfri_gateway_e1526_firmware:*:*:*:*:*:*:*:*
ikeatradfri_gateway_e1526-cpe:2.3:h:ikea:tradfri_gateway_e1526:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ikea	tradfri_gateway_e1526_firmware	*	cpe:2.3:o:ikea:tradfri_gateway_e1526_firmware::::::::
ikea	tradfri_gateway_e1526	-	cpe:2.3:h:ikea:tradfri_gateway_e1526:-:::::::*

CNA Affected

[
  {
    "vendor": "Ikea",
    "product": "TRÅDFRI gateway system",
    "versions": [
      {
        "version": "< 1.19.26",
        "status": "affected"
      }
    ]
  }
]

References

www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting-gateway/

Social References

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

Related for CVE-2022-39065