Views:

You see this message on the Trend Micro Home Network Security app:

"Speaker Info Leak Vulnerability"

Why did this happen?

A vulnerability in your Internet-connected speaker was detected where specific Sonos and Bose models can be bypassed by attackers to play sound remotely.

What are its risks?

The attacker can view the name of the device, its’ location and UUID.

This information can give the attacker the ability to find out what devices are in the networks or that a person may specifically have.

You can check our research, The Sound of a Targetted Attack, to know more about this attack.

What should I do next?

Apply the most recent patch or firmware updates from Sonos or Bose speakers.

Add a comment