Vulnerabilities > Sonos > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-02-18 CVE-2022-24049 Out-of-bounds Write vulnerability in Sonos S1 and S2
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems).
network
low complexity
sonos CWE-787
critical
10.0
2018-07-03 CVE-2018-11316 Improper Input Validation vulnerability in Sonos Firmware
The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack.
network
low complexity
sonos CWE-20
critical
9.6