Test ID:	1.3.6.1.4.1.25623.1.0.154375
Category:	General
Title:	Sonos Speakers S1 App < 11.15.1, S2 App < 16.6 Multiple RCE Vulnerabilities (SSA-2024-0002)
Summary:	Sonos speakers are prone to multiple remote code execution; (RCE) vulnerabilities.
Description:	Summary: Sonos speakers are prone to multiple remote code execution (RCE) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2025-1048: Remote code execution (RCE) in the handling of HLS - CVE-2025-1049: Remote code execution (RCE) in the MPEG-TS parsing code Affected Software/OS: - Sonos speakers with S1 app prior to version 11.15.1 (build 57.22-61162) - Sonos speakers with S2 app prior to version 16.6 (build 83.1-61240) Solution: - Update Sonos speakers with S1 app to version 11.15.1 (build 57.22-61162) or later - Update Sonos speakers with S2 app to version 16.6 (build 83.1-61240) or later CVSS Score: 8.3 CVSS Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-1048 Common Vulnerability Exposure (CVE) ID: CVE-2025-1049
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.