Vulnerabilities > Sonos > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-02-18 | CVE-2022-24049 | Out-of-bounds Write vulnerability in Sonos S1 and S2 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). | 9.8 |
| 2018-07-03 | CVE-2018-11316 | Improper Input Validation vulnerability in Sonos Firmware The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. | 9.6 |