S1 vulnerabilities

6 known vulnerabilities in S1 from Sonos. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Era 300: Heap-based Buffer Overflow

  CVE-2025-1049Apr 23, 2025Sonos

  Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The s

• 8.8 High severity

  Era 300: Use After Free

  CVE-2025-1048Apr 23, 2025Sonos

  Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this

• 8.8 High severity

  One Speaker: Stack-based Buffer Overflow

  CVE-2023-27355Apr 20, 2023Sonos

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issu

• 8.8 High severity

  One Speaker: Use After Free

  CVE-2023-27352Apr 20, 2023Sonos

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB di

• 9.8 Critical severity

  One Speaker: Out-of-bounds Write

  CVE-2022-24049Feb 18, 2022SonosEPSS 7.21%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The specific

• 8.8 High severity

  One Speaker: Integer Underflow (Wrap or Wraparound)

  CVE-2022-24046Feb 18, 2022SonosEPSS 4.08%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The