CVE-2023-53965

Published: Dec 22, 2025Modified: Jun 17, 2026

8.6

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.

Affected (15)

Products: Sound4: Playout Ula8 Firmware, Stream X8 Firmware, Stream X4 Firmware, Stream X2 Firmware, Wm2 Firmware, Ip Connect Firmware, Voice Ula8 Firmware, Voice Ula4 Firmware, Voice Ula2 Firmware, Big Voice Firmware, Pulse Eco Firmware, Impact Eco Firmware, First Firmware, Pulse Firmware, Impact Firmware

Sound4

15 products

Playout Ula8 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Playout Ula8 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Playout Ula8	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Stream X8 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Stream X8	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Stream X4 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Stream X4	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Stream X2 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Stream X2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Wm2 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Wm2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Ip Connect Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Ip Connect	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Voice Ula8 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Voice Ula8	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Voice Ula4 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Voice Ula4	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Voice Ula2 Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Voice Ula2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Big Voice Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Big Voice	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Pulse Eco Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Pulse Eco	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Impact Eco Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Impact Eco	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 First Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 First	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Pulse Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Pulse	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Impact Firmware	Version 4.1.102

Running on/with	Platform Versions
Sound4 Impact	All versions

Related CWEs

CWE-428

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (5)

https://web.archive.org/web/20221207074555/https://www.sound4.com/

Source: disclosure@vulncheck.com

Product

https://www.exploit-db.com/exploits/51167

Source: disclosure@vulncheck.com

ExploitThird Party Advisory

https://www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-via-unquoted-service-path

Source: disclosure@vulncheck.com

Third Party Advisory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php

Source: disclosure@vulncheck.com

ExploitThird Party Advisory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.