← Back

CVE-2023-53955

nvd nist
Published: Dec 22, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: disclosure@vulncheck.com (Secondary)

Description

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without proper authentication.

Affected (12)

Sound4
9 products
Stream Extension
Wm2 Firmware
Big Voice2 Firmware
Big Voice4 Firmware
Pulse Eco Firmware
Impact Eco Firmware
First Firmware
Pulse Firmware
Impact Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Stream Extension
Version 2.4.29
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wm2 Firmware
Version 1.11
Running on/withPlatform Versions
Sound4
Wm2
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Big Voice2 Firmware
Version 1.30
Running on/withPlatform Versions
Sound4
Big Voice2
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Big Voice4 Firmware
Version 1.2
Running on/withPlatform Versions
Sound4
Big Voice4
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pulse Eco Firmware
Version 1.16
Running on/withPlatform Versions
Sound4
Pulse Eco
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Impact Eco Firmware
Version 1.16
Running on/withPlatform Versions
Sound4
Impact Eco
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
First Firmware
Version 1.69
Running on/withPlatform Versions
Sound4
First
Version 1.0
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
First Firmware
Version 2.15
Running on/withPlatform Versions
Sound4
First
Version 2.0
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pulse Firmware
Version 1.69
Running on/withPlatform Versions
Sound4
Pulse
Version 1.0
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pulse Firmware
Version 2.15
Running on/withPlatform Versions
Sound4
Pulse
Version 2.0
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Impact Firmware
Version 1.69
Running on/withPlatform Versions
Sound4
Impact
Version 1.0
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Impact Firmware
Version 2.15
Running on/withPlatform Versions
Sound4
Impact
Version 2.0

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (5)

Source: disclosure@vulncheck.com
Product
Source: disclosure@vulncheck.com
ExploitThird Party AdvisoryVDB Entry
Source: disclosure@vulncheck.com
Third Party Advisory
Source: disclosure@vulncheck.com
ExploitThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitThird Party Advisory

Timeline

No history available yet.