CVE-2023-50810: Sonos Firmware

Medium severity, CVSS 6.0. EPSS: 0.8% chance of exploitation in the next 30 days.

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used to override the kernel command-line parameters and ultimately bypass the Secure Boot implementation. This affects PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp.

Affected products

• Sonos Sonos Firmware: before S1.11.12 (fixed in S1.11.12); before S2.15.9 (fixed in S2.15.9)

Published 2024-08-12. Last modified 2026-06-17.