CVE-2020-9285

Medium

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be…

mitre·NVD-CWE-noinfo·Published 2022-10-20

CVSS

6.8

EPSS

0.00

KEV

Exploits

cve.orgen

229 chars

Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.

NVDen

229 chars

NVDes

257 chars

Algunas versiones de Sonos One (1ª y 2ª generación) permiten el acceso parcial o total a la memoria por medio de hardware controlado por un atacante que puede conectarse a la ranura Mini-PCI Express de la placa base que aloja la tarjeta WiFi del dispositivo

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.8	—	—	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H