Sound4

Pulse Eco Firmware

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2022-50787

Exploit
  • EPSS 0.31%
  • Veröffentlicht 30.12.2025 22:41:35
  • Zuletzt bearbeitet 13.01.2026 15:12:24

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains an unauthenticated stored cross-site scripting vulnerability in the username parameter that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated username input to exec...

7.5

CVE-2022-50695

Exploit
  • EPSS 0.81%
  • Veröffentlicht 30.12.2025 22:41:34
  • Zuletzt bearbeitet 16.01.2026 19:16:10

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attackers to send ICMP signals to arbitrary hosts through network command scripts. Attackers can abuse ping.php, traceroute.php, and dns.php to ge...

9.8

CVE-2022-50694

Exploit
  • EPSS 0.07%
  • Veröffentlicht 30.12.2025 22:41:34
  • Zuletzt bearbeitet 16.01.2026 19:16:10

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through the username parameter to ...

7.5

CVE-2022-50692

Exploit
  • EPSS 0.07%
  • Veröffentlicht 30.12.2025 22:41:33
  • Zuletzt bearbeitet 20.01.2026 18:51:15

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sess...

9.8

CVE-2023-53964

Exploit
  • EPSS 1.04%
  • Veröffentlicht 22.12.2025 21:37:17
  • Zuletzt bearbeitet 16.01.2026 19:16:14

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific d...

9.8

CVE-2023-53963

Exploit
  • EPSS 2.55%
  • Veröffentlicht 22.12.2025 21:37:17
  • Zuletzt bearbeitet 13.01.2026 15:42:50

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scr...

7.5

CVE-2023-53962

Exploit
  • EPSS 5.04%
  • Veröffentlicht 22.12.2025 21:37:16
  • Zuletzt bearbeitet 16.01.2026 19:16:13

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parameter in upload.cgi. Attackers can exploit the vulnerability by sending c...

4.3

CVE-2023-53961

Exploit
  • EPSS 0.06%
  • Veröffentlicht 22.12.2025 21:37:16
  • Zuletzt bearbeitet 16.01.2026 19:16:13

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio proces...

9.8

CVE-2023-53955

Exploit
  • EPSS 0.57%
  • Veröffentlicht 22.12.2025 21:37:15
  • Zuletzt bearbeitet 13.01.2026 18:23:14

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied inpu...

9.8

CVE-2023-53960

Exploit
  • EPSS 0.22%
  • Veröffentlicht 22.12.2025 21:37:15
  • Zuletzt bearbeitet 16.01.2026 19:16:13

SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST p...