CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 0CVE-2022-24049 – Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-24049
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. • https://www.zerodayinitiative.com/advisories/ZDI-22-261 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 9.6EPSS: 0%CPEs: 2EXPL: 0CVE-2018-11316
https://notcve.org/view.php?id=CVE-2018-11316
The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker. El servidor HTTP UPnPn en los productos de altavoces inalámbricos de Sonos permite el acceso no autorizado mediante un ataque de revinculación de DNS. Esto puede conducir al control remoto del dispositivo y a la filtración por un atacante de información de red y del dispositivo privilegiado. • https://medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325 https://www.wired.com/story/chromecast-roku-sonos-dns-rebinding-vulnerability • CWE-20: Improper Input Validation •