← Back

Impact Firmware

impact_firmware

Vendor: Sound4 • 22 CVEs

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-53955
1Sound4
9Big Voice2 Firmware
Big Voice4 FirmwareFirst Firmware+6 more
Jun 17, 2026
Dec 22, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by m...Show more
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without proper authentication.Show less
CVE-2025-63215
1Sound4
1Impact Firmware
Jun 17, 2026
Nov 18, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attack...Show more
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.Show less