Sonos Beam 2nd Gen (BEAM2US1)

Security Grade

Calculator v1

   Brand: Sonos (Parent: Sonos, Inc.)

   Category: Soundbar (Wi-Fi / HDMI eARC) • Model / Gen:  BEAM2US1

   Release Date: 2021-06-01 • Status: In sale

   Classification Date: 2026-10-28 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Sealed unit with signed firmware; no documented debug interface, but flash can be read after disassembly.
Known vulnerabilities	Very common	[1] 🔗 Proof	CVE-2023-50809 explicitly lists Beam Gen 2: the mt_7615 wireless driver does not validate an information element in the WPA2 four-way handshake, giving a stack buffer overflow and kernel RCE (7.8).
Prior attacks	None	🔗 Proof	No CISA KEV entry, no public exploit and no observed campaign; disclosure came from a research audit.
Updatability	Very common	🔗 Proof	Fixed in S2 15.9 / S1 11.12 and delivered by automatic OTA update.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Account pairing authenticates the app, but the Wi-Fi stack is reachable before any application-level authentication.
Communications	Encrypted with obselete encryption	🔗 Proof	Cloud traffic is TLS protected; local Wi-Fi association and media streams are accepted from any nearby radio without credential checks.
Storage	Encrypted with obselete encryption	🔗 Proof	Settings and cached media are stored in flash with no published encryption.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Single household account with owner and member roles; no per-device credentials.
Authentication	Basic	🔗 Proof	App authentication is solid, device-level authentication for the wireless stack is not present.
Brute-force protection	Basic	🔗 Proof	Basic rate limiting on account login; nothing comparable on local interfaces.
Event logging	Partial logging	🔗 Proof	App shows playback history; no security event log and no syslog.
Passwords	Require change after setup	🔗 Proof	Account password supports complexity and can be changed, but no rotation policy and no per-device secret.
Category Score	Score: 2 / 3

Property	Details
Operating System & App	Sonos OS (Companion App: Sonos App)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Wi-Fi 5, Bluetooth LE, HDMI eARC, Ethernet (adapter)
Physical (Dimensions & Mass)	Dimensions: • Mass: