CVE-2023-50810

Summary

CVE-2023-50810 is a critical vulnerability affecting select Sonos devices, including PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp. The issue lies within the U-Boot component of the firmware, where a failure to properly handle the setenv command return value enables arbitrary code execution with Linux kernel privileges. This bypasses the Secure Boot implementation, posing a significant security risk to affected devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.