One Speaker vulnerabilities

4 known vulnerabilities in One Speaker from Sonos. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  One Speaker: Stack-based Buffer Overflow

  CVE-2023-27355Apr 20, 2023Sonos

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issu

• 8.8 High severity

  One Speaker: Use After Free

  CVE-2023-27352Apr 20, 2023Sonos

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB di

• 9.8 Critical severity

  One Speaker: Out-of-bounds Write

  CVE-2022-24049Feb 18, 2022SonosEPSS 7.21%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The specific

• 8.8 High severity

  One Speaker: Integer Underflow (Wrap or Wraparound)

  CVE-2022-24046Feb 18, 2022SonosEPSS 4.08%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The