Sonos has patched vulnerabilities in its smart speakers, including a serious flaw that could have been exploited to eavesdrop on users. One of the vulnerabilities, tracked as CVE-2023-50809, can be exploited by an attacker who is in Wi-Fi range of the targeted Sonos smart speaker for remote code execution. Sonos informed customers about the vulnerability in an advisory published on August 1, but the actual patches were released last year.
Read more: https://www.securityweek.com/vulnerability-allowed-eavesdropping-via-sonos-smart-speakers/