CVE-2024-5256
Sonos
CVE-2024-5256 is a vulnerability in Sonos Era 100 smart speakers, specifically related to SMB2 message handling. This Integer Underflow can lead to sensitive information disclosure by network-adjacent attackers without requiring authentication. Although the CVSS score is 4.3, indicating moderate severity, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower immediate risk compared to vulnerabilities with SVRS scores above 80. The flaw exists due to improper validation of user-supplied data, leading to a potential integer underflow. While the risk of direct code execution is low, attackers might chain this vulnerability with others to achieve root access. It's important to monitor and patch this vulnerability as part of a comprehensive security strategy for Sonos devices to mitigate potential risks. The vulnerability was originally identified as ZDI-CAN-22336.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.