One Speaker vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OS

Product

One Speaker

by Sonos · last CVE Apr 20, 2023

6

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 3Medium 2Low 0

Severity

All severities6 Critical1 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add One Speaker to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-24049	9.8	7%	Feb 18	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1… Affected: prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems)
CVE-2023-27352	8.8	1%	Apr 20	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220 Affected: 70.3-35220
CVE-2023-27355	8.8	1%	Apr 20	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220 Affected: 70.3-35220
CVE-2022-24046	8.8	4%	Feb 18	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build… Affected: prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems)
CVE-2023-27353	6.5	1%	Apr 20	This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220 Affected: 70.3-35220
CVE-2023-27354	6.5	1%	Apr 20	This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220 Affected: 70.3-35220