Era 100 Firmware vulnerabilities

2 known vulnerabilities in Era 100 Firmware from Sonos. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Era 100: Use After Free

  CVE-2024-5269Jun 6, 2024SonosEPSS 1.2%

  Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to

• 8.8 High severity

  Era 100: Out-of-bounds Write

  CVE-2024-5267Jun 6, 2024Sonos

  Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not require