Approved changes feed: RSS · Atom
cpe:2.3:h:sound4:first:2.0:*:*:*:*:*:*:*
part: h version: 2.0 update: *
| Vendor | Sound4 (d55b00e8-a014-56db-a147-2b7b0fb66454) |
|---|---|
| Product | First (77b90cc3-3304-5de0-bec5-17b666d994ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53964 |
not_vulnerable | 2026-06-08 06:19:40.151822 |
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability
CRITICAL (9.8)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass authentication, gaining full system control.
Published: 2025-12-22T21:37:17.482Z
Updated: 2026-01-16T19:00:17.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53963 |
not_vulnerable | 2026-06-08 06:19:40.149255 |
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection
CRITICAL (9.8)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scripts by injecting shell commands via the 'password' POST parameter to execute commands with web server privileges.
Published: 2025-12-22T21:37:17.088Z
Updated: 2025-12-22T22:03:29.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53962 |
not_vulnerable | 2026-06-08 06:19:40.147333 |
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write
HIGH (7.5)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parameter in upload.cgi. Attackers can exploit the vulnerability by sending crafted multipart form-data POST requests with directory traversal sequences to write files to unintended system locations.
Published: 2025-12-22T21:37:16.671Z
Updated: 2026-01-16T19:00:17.015Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53961 |
not_vulnerable | 2026-06-08 06:19:40.141856 |
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery
MEDIUM (4.3)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio processing interface, triggering unintended administrative operations when a logged-in user visits the page.
Published: 2025-12-22T21:37:16.249Z
Updated: 2026-01-16T19:00:16.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53960 |
not_vulnerable | 2026-06-08 06:19:40.138720 |
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass
CRITICAL (9.8)
SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter to bypass authentication and potentially gain unauthorized access to the system.
Published: 2025-12-22T21:37:15.771Z
Updated: 2026-01-16T19:00:16.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53955 |
not_vulnerable | 2026-06-08 06:19:40.111639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50796 |
not_vulnerable | 2026-06-08 05:52:03.531825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50795 |
not_vulnerable | 2026-06-08 05:52:03.529554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50794 |
not_vulnerable | 2026-06-08 05:52:03.527181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50793 |
not_vulnerable | 2026-06-08 05:52:03.525586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50792 |
not_vulnerable | 2026-06-08 05:52:03.523080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50791 |
not_vulnerable | 2026-06-08 05:52:03.520698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50790 |
not_vulnerable | 2026-06-08 05:52:03.512011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50789 |
not_vulnerable | 2026-06-08 05:52:03.509361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50788 |
not_vulnerable | 2026-06-08 05:52:03.507125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50787 |
not_vulnerable | 2026-06-08 05:52:03.505251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50696 |
not_vulnerable | 2026-06-08 05:52:03.475944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50695 |
not_vulnerable | 2026-06-08 05:52:03.474535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50694 |
not_vulnerable | 2026-06-08 05:52:03.472841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50692 |
not_vulnerable | 2026-06-08 05:52:03.460065 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.