SOUND4

9 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-50796

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data…

  SOUND4 Kantar Media Impact/Pulse/First BigVoice4
  Dec 30, 2025
• Critical 9.8
  CVE-2022-50794

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username

  SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. Attackers can exploit index.php and login.php scripts by injecting arbitrary shell commands through the HTTP POST 'usern…

  SOUND4 Kantar Media WM2 Impact/Pulse Eco
  Dec 30, 2025
• Critical 9.8
  CVE-2022-50696

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass

  SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal device operations. Attackers can leverage these static credentials to gain unauthorized access to the device …

  SOUND4 Kantar Media Impact/Pulse/First BigVoice4
  Dec 30, 2025
• Critical 9.8
  CVE-2022-50694

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter

  SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through the username parameter to bypass au…

  SOUND4 Kantar Media WM2 Impact/Pulse Eco
  Dec 30, 2025
• Critical 9.8
  CVE-2023-53963

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scripts by i…

  SOUND4 Kantar Media WM2 Impact/Pulse Eco
  Dec 22, 2025
• Critical 9.8
  CVE-2023-53964

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to tr…

  SOUND4 Kantar Media Impact/Pulse/First BigVoice4
  Dec 22, 2025
• Critical 9.8
  CVE-2023-53955

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to exec…

  SOUND4 Kantar Media BigVoice2 Impact/Pulse/First
  Dec 22, 2025
• Critical 9.8
  CVE-2023-53960

  SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass

  SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter …

  SOUND4 Kantar Media WM2 Impact/Pulse Eco
  Dec 22, 2025
• Critical 9.8
  CVE-2023-53966

  SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

  SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format stri…

  SOUND4 SOUND4 LinkAndShare Transmitter
  Dec 22, 2025