CVE-2023-50810

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...

CVE-2023-50810

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...

CVE-2023-50810

A vulnerability exists in the U-Boot component of the firmware in certain Sonos products, including PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp . The flaw is caused by a failure to correctly handle the return value of the setenv command, which allows an attacker to override kernel command...