Test ID:	1.3.6.1.4.1.25623.1.0.154374
Category:	General
Title:	Sonos Speakers S2 App < 16.6 RCE Vulnerability (SSA-2024-0002)
Summary:	Sonos speakers are prone to a remote code execution (RCE); vulnerabilities.
Description:	Summary: Sonos speakers are prone to a remote code execution (RCE) vulnerabilities. Vulnerability Insight: A vulnerability exists in the SMB2 protocol implementation within the affected product that stems from a Use-After-Free (UAF) condition, which occurs when a memory location is accessed after it has been freed, leading to unpredictable behavior. Vulnerability Impact: A malicious actor could send a specially crafted SMB2 message to the affected device, triggering the UAF condition and potentially leading to remote code execution. Affected Software/OS: Sonos speakers with S2 app prior to version 16.6 (build 83.1-61240). Solution: Update to version 16.6 (build 83.1-61240) or later. CVSS Score: 8.3 CVSS Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-1050
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.