PT-2023-21075 · Sonos · Sonos One Speaker

Hi_Im_D4Rkn3Ss + 3 · Published 2023-04-14 · Updated 2023-05-04 · CVE-2023-27353

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sonos One Speaker version 70.3-35220

Description This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the "msprox" endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other issues to execute arbitrary code in the context of root.

Recommendations For Sonos One Speaker version 70.3-35220, as a temporary workaround, consider restricting access to the "msprox" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2023-27353

ZDI-23-448

Affected Products

Sonos One Speaker

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-27353 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27353 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-448 · Security Note
• https://t.me/cvenotify/49805 · Telegram Post
• https://t.me/cvenotify/48778 · Telegram Post
• https://t.me/cibsecurity/62568 · Telegram Post