https://tsecurity.de/de/1032419/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/Sonos+Wireless+Speaker+UPnP+HTTP+Server+DNS+Rebinding+privilege+escalation/
Sonos Wireless Speaker UPnP HTTP Server DNS Rebinding privilege escalation