| Sonos One (Gen 2) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Sonos One (Gen 2)
Brand: Sonos (Parent: Sonos, Inc.) Category: Smart speaker • Model / Gen: One (Gen 2) Release Date: 2019-03-01 • Status: End of sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | CVE-2020-9285 allows memory access via Mini-PCIe slot hardware. |
| Known vulnerabilities | Rare | 🔗 Proof | CVE-2022-24049 (9.8 RCE), CVE-2023-27352/27355 (8.8), CVE-2023-50810 Secure Boot bypass. |
| Prior attacks | Rare | 🔗 Proof | Pwn2Own Toronto 2022 demonstrated exploitation. |
| Updatability | Very common | 🔗 Proof | Sonos regularly updates S1/S2 firmware. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | UPnP unauthenticated access via DNS rebinding (CVE-2018-11316). |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Cloud uses TLS but local UPnP is plaintext HTTP. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Local storage encryption not fully documented. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Sonos account management. |
| Authentication | Secure | 🔗 Proof | Sonos account authentication. |
| Brute-force protection | Exist | 🔗 Proof | Login rate limiting. |
| Event logging | Access event logged | 🔗 Proof | Activity logged. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Account password complexity. |
| Category Score | Score: 1 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Sonos OS (S2) (Companion App: Sonos app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: Internal flash |
| Power, Battery & Charging | Battery: • Power: AC adapter • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: Wi-Fi, AirPlay 2, Ethernet |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
Sonos One Gen 2 has a strong account layer and frequent updates, but a 9.8-rated RCE (CVE-2022-24049), Secure Boot bypass and unauthenticated UPnP surface show meaningful local/network risk.
