MAL-2024-2314 Malicious code in @fdfe/era-proxy (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/era-cloud-uploader (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2313 Malicious code in @fdfe/era-cloud-uploader (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/era-cellar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2312 Malicious code in @fdfe/era-cellar (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/era-build-runtime (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2311 Malicious code in @fdfe/era-build-runtime (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/era-build (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2310 Malicious code in @fdfe/era-build (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-5267

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5268

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this...

CVE-2024-5267

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5268

Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this...

CVE-2024-5269

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5256

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerabilit...

CVE-2024-5256

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerabilit...

CVE-2024-5269

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5269

The CVE-2024-5269 entry affects Sonos Era 100 devices, where SMB2 message handling flaws allow a use-after-free that enables remote code execution with root privileges. The vulnerability is exploitable by network-adjacent attackers without authentication, via crafted SMB2 traffic that fails to va...

CVE-2024-5269 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5269 Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability

Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The...