CVE-2022-39064

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness level. After this attack, all lights are on with full brightness, and a user cannot control the bulbs with either the IKEA Home Smart app or the TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score 7.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

• CWE-241

• https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting/Third Party Advisory
• https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting/Third Party Advisory

Published

Oct 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39059ChangingTech MegaServiSignAdapter component has a path trave…7.5
• CVE-2022-3906The Easy Form Builder WordPress plugin before 3.4.0 does not…4.8
• CVE-2022-39060ChangingTech MegaServiSignAdapter component has a vulnerabil…9.8
• CVE-2022-39061ChangingTech MegaServiSignAdapter component has a vulnerabil…6.5
• CVE-2022-39062A vulnerability has been identified in SICAM TOOLBOX II (All…7.8
• CVE-2022-39063When Open5GS UPF receives a PFCP Session Establishment Reque…7.5
• CVE-2022-39065A single malformed IEEE 802.15.4 (Zigbee) frame makes the TR…6.5
• CVE-2022-39066There is a SQL injection vulnerability in ZTE MF286R. Due to…8.8
• CVE-2022-39067There is a buffer overflow vulnerability in ZTE MF286R. Due …6.5
• CVE-2022-39068There is a buffer overflow vulnerability in ZTE MF296R. Due …6.5
• CVE-2022-39069There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due …5.3
• CVE-2022-3907The Clerk WordPress plugin before 4.0.0 is affected by time-…7.5