Read the docs

Sonos

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Sonos records in CISA KEV

No Sonos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
S2 9 records MEDIUM S1 8 records MEDIUM One Firmware 5 records HIGH Era 100 Firmware 4 records MEDIUM Era 300 Firmware 2 records MEDIUM Sonos Firmware 1 record MEDIUM

Records

9 records in S2 · all components

TI-2022-08009 CVE-2022-24049 · GHSA-m4vq-jm9f-fm5m

Stack-based buffer overflow in Sonos One Speaker

Priority MEDIUM 52

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07212 Published 2022-02-18 No fix listed CWE-121
TI-2022-08006 CVE-2022-24046 · GHSA-x62j-p92q-x3qm

Integer underflow in Sonos One Speaker

Priority MEDIUM 45

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.04085 Published 2022-02-18 No fix listed CWE-191
TI-2023-12090 CVE-2023-27355 · GHSA-h7xj-6mw4-67wx

Stack-based buffer overflow in Sonos One Speaker

Priority MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2023-04-20 No fix listed CWE-121
TI-2025-00887 CVE-2025-1048 · GHSA-h868-x49r-ph66

Use after free in Sonos Era 300

Priority MEDIUM 41

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00544 Published 2025-04-23 No fix listed CWE-416
TI-2023-12087 CVE-2023-27352 · GHSA-6pq8-4f7j-wcw6

Use after free in Sonos One Speaker

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00783 Published 2023-04-20 No fix listed CWE-416
TI-2025-00889 CVE-2025-1050 · GHSA-2cc5-v43v-fh92

Out-of-bounds write in Sonos Era 300

Priority MEDIUM 40

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00418 Published 2025-04-23 No fix listed CWE-787
TI-2025-00888 CVE-2025-1049 · GHSA-gj4f-mppc-xjrp

Heap-based buffer overflow in Sonos Era 300

Priority MEDIUM 40

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00416 Published 2025-04-23 No fix listed CWE-122
TI-2023-12089 CVE-2023-27354 · GHSA-ppqq-2fjx-qxw2

Integer overflow in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-190
TI-2023-12088 CVE-2023-27353 · GHSA-r8ff-24ff-cv98

Out-of-bounds read in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-125
Open these records in search →