Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Sonos Component: One Firmware Clear all filters
TI-2023-12090 CVE-2023-27355 · GHSA-h7xj-6mw4-67wx

Stack-based buffer overflow in Sonos One Speaker

Priority MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2023-04-20 No fix listed CWE-121
TI-2023-12089 CVE-2023-27354 · GHSA-ppqq-2fjx-qxw2

Integer overflow in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-190
TI-2023-12088 CVE-2023-27353 · GHSA-r8ff-24ff-cv98

Out-of-bounds read in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-125
TI-2023-12087 CVE-2023-27352 · GHSA-6pq8-4f7j-wcw6

Use after free in Sonos One Speaker

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00783 Published 2023-04-20 No fix listed CWE-416
TI-2020-07425 CVE-2020-9285 · GHSA-mh42-rqv8-hggx

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access…

Priority HIGH 65

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on th…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00501 Published 2022-10-20 No fix listed CWE-1191