Sonos Era 100 Smart Speaker Remote Code Execution Vulnerability

CVE-2024-5267

Summary

The vulnerability within Sonos Era 100 smart speakers stems from a critical flaw in the handling of SMB2 messages. This flaw allows network-adjacent attackers to execute arbitrary code on affected devices without requiring authentication. The issue arises from insufficient validation of user-supplied data, enabling a write operation that can surpass the allocated buffer's boundaries. As a result, an attacker could exploit this vulnerability, gaining control in the context of the root user, which poses a significant security risk to users of Sonos Era 100 smart speakers. For further details, refer to the advisory from the Zero Day Initiative.

References