CVE-2020-9285: Medium severity sonos one firmware vulnerability
Published Oct 20, 2022
·Updated
Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.
Affected Software
4 affected components
Sonos One Firmware
Sonos One
All of the following
Sonos One Firmware
Sonos One
Event History
Oct 20, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-9285?
CVE-2020-9285 has been rated with a medium severity due to the potential for memory access exploitation.
2
How do I fix CVE-2020-9285?
To address CVE-2020-9285, ensure that your Sonos One firmware is updated to the latest version provided by Sonos.
3
What types of devices are affected by CVE-2020-9285?
CVE-2020-9285 affects some versions of the Sonos One (1st and 2nd generation) speakers.
4
Can attackers exploit CVE-2020-9285 remotely?
CVE-2020-9285 typically requires physical access to the device, limiting remote exploitation.
5
What kind of access do attackers gain through CVE-2020-9285?
Attackers can gain partial or full memory access through hardware attached to the Mini-PCI Express slot.