CVE-2023-50809: Buffer Overflow
In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50809?
CVE-2023-50809 has been rated as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2023-50809?
To mitigate CVE-2023-50809, update your Sonos products to at least S1 Release 11.12 or S2 release 15.9.
What products are affected by CVE-2023-50809?
CVE-2023-50809 affects certain Sonos products that are running versions prior to S1 Release 11.12 and S2 release 15.9.
What type of vulnerability is CVE-2023-50809?
CVE-2023-50809 is a buffer overflow vulnerability in the mt_7615.ko wireless driver.
Can CVE-2023-50809 be exploited remotely?
Yes, CVE-2023-50809 can be exploited remotely due to its nature of allowing remote code execution.