Sonos S2 — known CVE vulnerabilities

Every CVE whose affected-product data names Sonos S2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-24049 — CVSS 9.8 (critical): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2…
• CVE-2023-27352 — CVSS 8.8 (high): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220…
• CVE-2022-24046 — CVSS 8.8 (high): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to…
• CVE-2025-1049 — CVSS 8.8 (high): Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2025-1050 — CVSS 8.8 (high): Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute…
• CVE-2023-27355 — CVSS 8.8 (high): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220…
• CVE-2025-1048 — CVSS 8.8 (high): Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2023-27353 — CVSS 6.5 (medium): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker…
• CVE-2023-27354 — CVSS 6.5 (medium): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker…