Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority MEDIUM 40

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00416 Published 2025-04-23 No fix listed CWE-122
TI-2025-00887 CVE-2025-1048 · GHSA-h868-x49r-ph66

Use after free in Sonos Era 300

Priority MEDIUM 41

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00544 Published 2025-04-23 No fix listed CWE-416
Priority MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00814 Published 2023-04-20 No fix listed CWE-121
TI-2023-12089 CVE-2023-27354 · GHSA-ppqq-2fjx-qxw2

Integer overflow in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-190
TI-2023-12088 CVE-2023-27353 · GHSA-r8ff-24ff-cv98

Out-of-bounds read in Sonos One Speaker

Priority LOW 30

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0063 Published 2023-04-20 No fix listed CWE-125
TI-2023-12087 CVE-2023-27352 · GHSA-6pq8-4f7j-wcw6

Use after free in Sonos One Speaker

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00783 Published 2023-04-20 No fix listed CWE-416
Priority MEDIUM 52

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07212 Published 2022-02-18 No fix listed CWE-121
TI-2022-08006 CVE-2022-24046 · GHSA-x62j-p92q-x3qm

Integer underflow in Sonos One Speaker

Priority MEDIUM 45

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.04085 Published 2022-02-18 No fix listed CWE-191