Stack Buffer Overflow in Sonos Wireless Driver Affects Multiple Products
CVE-2023-50809

7.8HIGH

Key Information:

Vendor

Sonos

Status
Wireless Driver (mt_7615.ko)
Vendor
CVE Published:
12 August 2024

What is CVE-2023-50809?

A vulnerability has been identified in specific Sonos products that utilize the mt_7615.ko wireless driver. This issue stems from improper validation during the WPA2 four-way handshake negotiation. Consequently, the flaw can lead to a stack buffer overflow, allowing attackers to potentially execute arbitrary code within the kernel. The affected devices include the Sonos Amp, Arc, Beam, and others, posing significant security risks if left unaddressed.

References

https://www.sonos.com/en-us/security-advisory-2024-0001

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.