Sonos One Speaker 缓冲区错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. Sonos One Speaker version 70.3-35220 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in a read beyond the end of the allocated buffer, which could be exploited by a...

CVE-2023-27353

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msprox endpoint. The issue results from the lack of...

Sonos One Speaker 资源管理错误漏洞

Sonos One Speaker is a Smart Speaker from Sonos, USA. Sonos One Speaker version 70.3-35220 suffers from a resource management error vulnerability that stems from not verifying the existence of an object before performing an operation on it, which can be exploited by an attacker to execute code in...

CVE-2023-27352

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue...

CVE-2023-27353

CVE-2023-27353 affects Sonos One Speaker 70.3-35220. The flaw resides in the msprox endpoint, where improper validation of user-supplied data causes a read past the end of an allocated buffer. This can enable network-adjacent attackers to disclose sensitive information and, in combination with ot...

CVE-2023-27355

CVE-2023-27355 affects Sonos One Speaker 70.3-35220. The vulnerability lies in the MPEG-TS parser where the length of user-supplied data isn’t properly validated before copying to a fixed-length stack buffer, enabling network-adjacent attackers to execute code with root privileges (unrestricted, ...

One Speaker 输入验证错误漏洞

Sonos One Speaker is a Smart Speaker from Sonos, USA. An input validation error vulnerability exists in Sonos One Speaker version 70.3-35220, which stems from a lack of proper validation of user-supplied data, and can be exploited by an attacker to execute arbitrary code in a rooted context...

(Pwn2Own) Sonos One Speaker msprox Endpoint Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the msprox endpoint. The issue results from the lack of proper...

PT-2023-21077 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

(Pwn2Own) Sonos One Speaker MPEG-TS Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper validation of...

PT-2023-21074 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

PT-2023-21076 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within...

PT-2023-21075 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within...

(Pwn2Own) Sonos One Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue results from th...

(Pwn2Own) Sonos One Speaker libsmb2 Integer Overflow Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The issue results...

CVE-2017-16319

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16270

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

PT-2023-10600 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue concerns a buffer overflow vulnerability in the PubNub message handler for the "cc" channel. It can be triggered by sending specially crafted commands through the PubNub service, causing a...

PT-2023-10546 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: The issue concerns buffer overflow vulnerabilities in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow,...

PT-2023-10590 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...