Lucene search
K

17 matches found

CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 安全漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A security vulnerability exists in several SOUND4 products that originates fr...

8.7CVSS6.8AI score0.00269EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 路径遍历漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. A path traversal vulnerability exists in several SOUND4 products, which stems from a path...

9.8CVSS7.9AI score0.01147EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 跨站脚本漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. A cross-site scripting vulnerability exists in several SOUND4 products that stems from an...

7.2CVSS5.9AI score0.00134EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 安全漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A security vulnerability exists in several SOUND4 products, which stems from...

7.5CVSS6.5AI score0.00387EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 信任管理问题漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A trust management issue vulnerability exists in various SOUND4 products that stems...

9.8CVSS6.7AI score0.00285EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in several SOUND4 products. The...

8.5CVSS7.5AI score0.0144EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

SOUND4多款产品 操作系统命令注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. An operating system command injection vulnerability exists in various SOUND4 products that...

8.8CVSS7.5AI score0.00557EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.0 views

SOUND4多款产品 路径遍历漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional broadcast audio processor.SOUND4 FIRST is a broadcast audio processor.SOUND4 PULSE is an audio processor. A path traversal vulnerability exists in a number of SOUND4 products, which stems from the fi...

8.7CVSS6.8AI score0.00387EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

SOUND4多款产品 SQL注入漏洞

SOUND4 IMPACT and others are products of SOUND4 France.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A SQL injection vulnerability exists in several SOUND4 products. The vulnerability stems...

9.8CVSS7.8AI score0.00039EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.0 views

SOUND4多款产品 访问控制错误漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. An Access Control Error vulnerability exists in various SOUND4 products, which...

7.5CVSS6.5AI score0.0024EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.3 views

PT-2025-52701

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x Description The software contains an unauthenticated issue in the /usr/cgi-bin/restorefactory.cgi endpoint. Remote attackers can send a POST request to this endpoint with specific data to trigger a...

8.8CVSS7AI score0.00663EPSS
Exploits2References7
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.2 views

SOUND4多款产品 SQL注入漏洞

SOUND4 IMPACT and others are products of the French company SOUND4.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. A SQL injection vulnerability exists in several SOUND4 products. The...

9.8CVSS7.9AI score0.00167EPSS
Exploits2References5
NVD
NVD
added 2025/09/22 5:16 p.m.1 views

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

8.8CVSS0.00137EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/09/22 12:0 a.m.5 views

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

0.00137EPSS
Exploits1References2
CVE
CVE
added 2025/09/22 12:0 a.m.9 views

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The underlying issue is that the update mechanism does not validate the integrity of the manual.sh script, allowing an attacker to inject arbitrary ...

8.8CVSS7.3AI score0.00137EPSS
Exploits1References2Affected Software1
Exploit DB
Exploit DB
added 2023/03/31 12:0 a.m.162 views

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)

Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution RCE Exploit Author: LiquidWorm Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First...

7.4AI score
Exploits0
Zero Science Lab
Zero Science Lab
added 2022/12/14 12:0 a.m.285 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (username) Unauthenticated Command Injection

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

9.8CVSS6.1AI score0.01174EPSS
Exploits2
Rows per page
Query Builder