CVE-2018-11316

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker.

Metrics

CVSS 3.0 9.6/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jul 3, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-113176.1Subrion CMS before 4.1.4 has XSS.CVE-2018-113197.5Syntastic (aka vim-syntastic) through 3.9.0 does not properly handle searches for configuration files (it searches the current directory up CVE-2018-11329.8A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticatingCVE-2018-113209.8In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive values obfuscated in tCVE-2018-113216.5An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to CVE-2018-113227.5An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP sCVE-2018-113238.8An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higherCVE-2018-113245.9An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updatesCVE-2018-113259.8An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validatCVE-2018-113264.8An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the CVE-2018-113274.3An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished CVE-2018-113284.7An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and p
CVE-2018-11316: Critical severity, CVSS 9.6 | Vulnix