Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-9285 1 Sonos 2 One, One Firmware 2025-05-08 6.8 Medium
Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.
CVE-2018-11316 1 Sonos 2 Sonos, Sonos Firmware 2024-11-21 N/A
The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker.