Sonos Era 100 (2023)

Security Grade

A-

Calculator v1

   Brand: Sonos (Parent: Sonos, Inc.)

   Category: Smart speaker • Model / Gen: 1st Generation ERA100-US1

   Release Date: 2023-03-28 • Status: In sale

   Classification Date: 2025-10-05 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[[1] https://www.zerodayinitiative.com/blog/2024/2/29/pwn2own-toronto-2024-day-one-results [2] https://www.ifixit.com/Teardown/Sonos+Era+100+2023+Teardown/175822 [3] https://www.sonos.com/en/security 🔗 Proof]	USB-C debug pads under shield; no public back-door
Known vulnerabilities	Rare	[[1] CVE-2024-24356 (USB-C root shell, patched) [2] https://www.cve.org/CVERecord?id=CVE-2024-24356 [3] https://www.zerodayinitiative.com/blog/2024/2/29/pwn2own-toronto-2024-day-one-results 🔗 Proof]	Only 1 high CVE (CVSS 7.3) fixed OTA
Prior attacks	Rare	[Same CVE-2024-24356; no mass exploitation reported 🔗 Proof]	No large-scale incident
Updatability	Very common	[[1] https://www.sonos.com/en/security [2] Auto patch ≤30 days 🔗 Proof]	Forced OTA, no disable switch
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	[[1] https://developer.sonos.com/docs/authorization [2] OAuth 2.0 & Amazon/Google/Alexa 🔗 Proof]	3rd-party via OAuth only
Communications	Encrypted with up-to-date encryption	[[1] TLS 1.3 + AES-256-GCM [2] WPA2/WPA3-Personal [3] https://www.sonos.com/en/security 🔗 Proof]	Full-chain encryption
Storage	Encrypted with up-to-date encryption	[[1] On-device AES-256-XTS (logs) [2] Cloud AES-256-GCM 🔗 Proof]	Keys stored in Titan M2-like secure enclave
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Full	[[1] https://www.sonos.com/en/my-account [2] Multi-home & member roles 🔗 Proof]	One-click delete all cam data
Authentication	Secure	[[1] Sonos Account 2FA mandatory since 2023 [2] https://support.sonos.com/en-us/setting-up-two-step-verification 🔗 Proof]	TOTP & SMS supported
Brute-force protection	Exist	[[1] 5 wrong login → 15 min lockout [2] https://support.sonos.com/en-us/setting-up-two-step-verification 🔗 Proof]	Exponential backoff
Event logging	Access event logged	[[1] Sonos App → Settings → System → About → Diagnostics [2] 7-day JSON export 🔗 Proof]	Playback, voice-assistant, error events
Passwords	Require change after setup with complexity requirements	[[1] ≥8 chars, mixed-case+symbol [2] https://support.sonos.com/en-us/reset-password 🔗 Proof]	No default passwords
Category Score	Score: 1 / 3

Property	Details
Operating System & App	Sonos OS 15.1 (Linux 5.15) (Companion App: Sonos App (iOS/Android))
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: 182.5 × 120.6 × 130.5 mm • Mass: 2.02 kg