“A low-privileged, close-proximity attacker could exploit this vulnerability to remotely execute arbitrary code”
NCC Group showed that anyone in Wi-Fi range of a Sonos One was able to take it over, record the room and ship the audio to their own server. The bug sat in a MediaTek wireless driver that mishandled the WPA2 handshake. Sonos shipped the patches last year and published the advisory on August 1. Owners spent months with a remotely hijackable microphone in the living room and nobody told them.