You do not have permission to edit this page, for the following reasons:
Overall assessment: Unlike most devices in this batch, the decisive issue here is model-specific. CVE-2022-39064 (CVSS 7.1) affects all versions of the TRADFRI LED bulb 1732G11: a malformed IEEE 802.15.4 frame forces a factory reset, and IKEA states that no update fully resolves the issue - release V-2.3.091 only mitigates part of the crafted frame variants. Updatability is therefore rated as rare. The impact is limited because the flaw is an availability problem: IKEA states no sensitive information is exposed, neither CVE is in CISA KEV and EPSS stays around 0.4 percent. The companion gateway issue CVE-2022-39065 was fixed in firmware 1.19.26. Transport security itself is sound - Zigbee 3.0 applies AES-128 network layer encryption - but the attack uses an unauthenticated broadcast frame, so an attacker in radio range does not need to join the network. Account handling is basic and no encryption at rest for network keys is documented. [[Category:Classification]] [[Category:Calculator v1]] [[Category:IKEA]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
