CVE-2022-39065 - CVE House
Back to Database
Status published Unknown CVE-2022-39065

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI...

Vulnerability Description

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-39065

Credits & Attribution

No credits recorded in the NVD database.

References

More from Ikea

View All →
CVE-2022-39064
An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame...
Unknown 0

Affected Vendor

Affected Software

TRÅDFRI gateway system
Vulnerable Versions:
< 1.19.26

Timeline

Official Publish: October 14th, 2022
Last Modified: May 15th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-241

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.