CVE-2023-50809
High
Description
In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSonos S2
PublishedAug 12, 2024
First seenAug 12, 2024
Weakness typeCWE-121CWE-121
How to fix
Update
- sonos s215.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sonos s2 | v < 15.9 | 15.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.