CVE-2023-50809 is a stack buffer overflow vulnerability in the mt_7615.ko wireless driver of certain Sonos products (Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five) before S1 Release 11.12 and S2 release 15.9. This flaw, stemming from improper validation during a WPA2 four-way handshake, allows for remote code execution within the kernel. With a CVSS score of 7.8 (HIGH), it presents a significant risk due to its potential for complete compromise of confidentiality, integrity, and availability, though it requires local access and low privileges. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), it is not on the KEV catalog, and community discussion and media coverage are minimal, indicating limited active exploitation or widespread awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| N/A | N/A | n/aCNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.