PT-2022-24706 · Ikea · Trådfri Bulb

Kari Hulkko + 1 · Published 2022-10-10 · Updated 2022-10-18 · CVE-2022-39064

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRÅDFRI bulb (affected versions not specified)

Description The issue arises when an attacker sends a single malformed IEEE 802.15.4 (Zigbee) frame, causing the TRÅDFRI bulb to blink. If the same frame is replayed multiple times, the bulb performs a factory reset, resulting in the loss of configuration information about the Zigbee network and current brightness level. After this attack, all lights are on with full brightness, and a user cannot control the bulbs with either the IKEA Home Smart app or the TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-241

Related Identifiers

CVE-2022-39064

Affected Products

Trådfri Bulb

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-39064 · Security Note
• https://t.me/true_secator/3540 · Telegram Post
• https://t.me/echeloneyes/761 · Telegram Post
• https://synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting · Note
• https://t.me/cibsecurity/51474 · Telegram Post