CVE Feed

    Dashboard / CVE / CVE-2023-50809

    CVE-2023-50809

    In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five.

    Published:Aug 9, 2024
    Last Modified:Apr 15, 2026
    EPS:Aug 9, 2024
    EPSS Score:0.02924
    CVSS Score:7.8

    Affected Products

    Vendor
    Sonos
    Product
    S2

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-1050 (CVSS 8.8) — Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjac…
    CVE-2025-1049 (CVSS 8.8) — Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows networ…
    CVE-2025-1048 (CVSS 8.8) — Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows ne…
    CVE-2023-27352 (CVSS 8.8) — This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of So…
    CVE-2023-27355 (CVSS 8.8) — This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of So…
    CVE-2023-27353 (CVSS 6.5) — This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installatio…
    CVE-2023-27354 (CVSS 6.5) — This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installatio…
    CVE-2022-24049 (CVSS 9.8) — This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Sp…
    CVE-2022-24046 (CVSS 8.8) — This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of So…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High