CVE-2020-9285

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.

Score

CVSS 3.1 6.8 Medium

Status

Modified - cve@mitre.org

Published

2022-10-20

Last modified

2025-05-08

Weaknesses

CWE-1191

Affected products

• One Firmware (Sonos)

References

• https://tnpitsecurity.com/blog/gaining-root-on-sonos-speakers/