Browse CVEs

CRITICAL 9.8 CVE-2022-50794 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. Attackers … Impact Firmware Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2022-50796 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path tr… Impact Firmware Mitigation only Fix from $2,3002025-12-30 HIGH 8.8 CVE-2022-50793 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows attacker… Impact Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.8 CVE-2022-50795 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious … Impact Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.5 CVE-2022-50792 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers to access … Impact Firmware No fix yet Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2022-50696 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal… First Firmware Mitigation only Fix from $2,3002025-12-30 HIGH 7.8 CVE-2022-50789 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the… Impact Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.8 CVE-2022-50791 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious … Impact Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.5 CVE-2022-50788 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log fi… First Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.5 CVE-2022-50790 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio strea… Impact Firmware No fix yet Fix from $1,9502025-12-30 HIGH 7.2 CVE-2022-50787 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains an unauthenticated stored cross-site scripting vulnerability in the username parameter that allow… First Firmware No fix yet Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2022-50694 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to ma… Impact Firmware Mitigation only Fix from $2,3002025-12-30 HIGH 7.5 CVE-2022-50692 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old sess… Stream Extension No fix yet Fix from $1,9502025-12-30 HIGH 7.5 CVE-2022-50695 SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attackers to send ICMP signals to arbitrary h… Impact Firmware No fix yet Fix from $1,9502025-12-30 CRITICAL 9.8 CVE-2023-53966 SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciou… Linkandshare Transmitter Mitigation only Fix from $2,3002025-12-22 HIGH 7.8 CVE-2023-53965 SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with… Playout Ula8 Firmware No fix yet Fix from $1,9502025-12-22 CRITICAL 9.8 CVE-2023-53960 SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers t… First Firmware Mitigation only Fix from $2,3002025-12-22 CRITICAL 9.8 CVE-2023-53963 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary s… Impact Firmware Mitigation only Fix from $2,3002025-12-22 CRITICAL 9.8 CVE-2023-53964 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attac… Impact Firmware Mitigation only Fix from $2,3002025-12-22 HIGH 7.5 CVE-2023-53962 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary file… Impact Firmware No fix yet Fix from $1,9502025-12-22 CRITICAL 9.8 CVE-2023-53955 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and acces… Stream Extension Mitigation only Fix from $2,3002025-12-22 HIGH 7.2 CVE-2025-63220 The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mech… First Firmware No fix yet Fix from $1,9502025-11-19 HIGH 7.2 CVE-2025-63215 The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mec… Impact Firmware No fix yet Fix from $1,9502025-11-18 HIGH 8.8 CVE-2025-57431 The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. … Pulse Eco Aes67 Firmware No fix yet Fix from $1,9502025-09-22