CVE-2023-50810

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...

CVE-2023-50810

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...

CVE-2023-50810

CVE-2023-50810 is a vulnerability in the U-Boot component of Sonos firmware prior to S1 11.12 and S2 15.9 (affecting PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp; and the Era-100 as noted in references). The flaw arises from improper handling of the return value of the setenv command, enab...