← Back

Ikea

ikea

3 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Tradfri Led1732g11 Firmware
tradfri_led1732g11_firmware
1 CVE
Tradfri Gateway E1526 Firmware
tradfri_gateway_e1526_firmware
1 CVE
Dirigera Firmware
dirigera_firmware
1 CVE
Tradfri Led1732g11
tradfri_led1732g11
0 CVEs
Tradfri Gateway E1526
tradfri_gateway_e1526
0 CVEs
Dirigera
dirigera
0 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-3588
1Ikea
1Dirigera Firmware
Jun 17, 2026
Mar 9, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.
CVE-2022-39065
1Ikea
1Tradfri Gateway E1526 Firmware
Jun 17, 2026
Oct 14, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee fram...Show more
A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score: 6.5 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HShow less
CVE-2022-39064
1Ikea
1Tradfri Led1732g11 Firmware
Jun 17, 2026
Oct 14, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. This causes the bulb to...Show more
An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness level. After this attack, all lights are on with full brightness, and a user cannot control the bulbs with either the IKEA Home Smart app or the TRÅDFRI remote control. The malformed Zigbee frame is an unauthenticated broadcast message, which means all vulnerable devices within radio range are affected. CVSS 3.1 Base Score 7.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HShow less