CVE:CVE-2023-27352
CNNVD:CNNVD-202304-1738
Sonos One Speaker是美国Sonos公司的一款智能音箱。
Sonos One Speaker 70.3-35220版本存在资源管理错误漏洞，该漏洞源于在对对象执行操作之前没有验证对象的存在，攻击者利用该漏洞可以在root上下文中执行代码。
solution:Upgrade sonos one_firmware to a higher version than 70.3-35220,and avoid the version 70.3-35220; Upgrade sonos s1 to a higher version than 11.7.1,and avoid the version (,11.7.1); Upgrade sonos s2 to a higher version than 15.1,and avoid the version (,15.1)