Read the docs

Sonos

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Sonos records in CISA KEV

No Sonos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
S2 9 records MEDIUM S1 8 records MEDIUM One Firmware 5 records HIGH Era 100 Firmware 4 records MEDIUM Era 300 Firmware 2 records MEDIUM Sonos Firmware 1 record MEDIUM

Records

5 records in One Firmware · all components

TI-2020-07425 CVE-2020-9285 · GHSA-mh42-rqv8-hggx

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access…

Priority HIGH 65

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on th…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00501 Published 2022-10-20 No fix listed CWE-1191
TI-2023-12090 CVE-2023-27355 · GHSA-h7xj-6mw4-67wx

Stack-based buffer overflow in Sonos One Speaker

Priority MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2023-04-20 No fix listed CWE-121
TI-2023-12087 CVE-2023-27352 · GHSA-6pq8-4f7j-wcw6

Use after free in Sonos One Speaker

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00783 Published 2023-04-20 No fix listed CWE-416
TI-2023-12089 CVE-2023-27354 · GHSA-ppqq-2fjx-qxw2

Integer overflow in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-190
TI-2023-12088 CVE-2023-27353 · GHSA-r8ff-24ff-cv98

Out-of-bounds read in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-125
Open these records in search →