sound4 kayıtları
sound4 üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-494 Download of Code Without Integrity Check3
- CWE-306 Missing Authentication for Critical Function2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
38İzleyin | CVE-2022-50794İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Usernamesound4 · impact firmware · CWE-78 | Kritik9,3 | — | %3,6 | 30 Ara 2025 |
38İzleyin | CVE-2023-53963İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injectionsound4 · impact firmware · CWE-78 | Kritik9,3 | — | %3,3 | 22 Ara 2025 |
37İzleyin | CVE-2022-50796İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgisound4 · impact firmware · CWE-22 | Kritik9,3 | — | %1,5 | 30 Ara 2025 |
37İzleyin | CVE-2023-53955İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object Referencessound4 · stream extension · CWE-639 | Kritik9,3 | — | %0,8 | 22 Ara 2025 |
37İzleyin | CVE-2023-53960İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypasssound4 · first firmware · CWE-89 | Kritik9,3 | — | %0,7 | 22 Ara 2025 |
37İzleyin | CVE-2023-53966İstismar yok | SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflowsound4 · linkandshare transmitter · CWE-134 | Kritik9,3 | — | %0,7 | 22 Ara 2025 |
37İzleyin | CVE-2022-50696İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypasssound4 · first firmware · CWE-798 | Kritik9,3 | — | %0,5 | 30 Ara 2025 |
35İzleyin | CVE-2022-50789İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.phpsound4 · impact firmware · CWE-78 | Yüksek8,5 | — | %4,1 | 30 Ara 2025 |
35İzleyin | CVE-2022-50795İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.phpsound4 · impact firmware · CWE-78 | Yüksek8,5 | — | %4,1 | 30 Ara 2025 |
35İzleyin | CVE-2022-50791İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.phpsound4 · impact firmware · CWE-78 | Yüksek8,5 | — | %3,7 | 30 Ara 2025 |
35İzleyin | CVE-2022-50793İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.phpsound4 · impact firmware · CWE-78 | Yüksek8,7 | — | %3,1 | 30 Ara 2025 |
35İzleyin | CVE-2023-53962İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Writesound4 · impact firmware · CWE-22 | Yüksek8,8 | — | %1,2 | 22 Ara 2025 |
35İzleyin | CVE-2023-53964İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerabilitysound4 · impact firmware · CWE-306 | Yüksek8,8 | — | %0,9 | 22 Ara 2025 |
35İzleyin | CVE-2022-50694İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parametersound4 · impact firmware · CWE-89 | Yüksek8,8 | — | %0,8 | 30 Ara 2025 |
35İzleyin | CVE-2025-57431İstismar yok | The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update sound4 · pulse-eco aes67 firmware · CWE-494 | Yüksek8,8 | — | %0,3 | 22 Eyl 2025 |
34İzleyin | CVE-2022-50792İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerabilitysound4 · impact firmware · CWE-22 | Yüksek8,7 | — | %1,5 | 30 Ara 2025 |
34İzleyin | CVE-2022-50695İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commandssound4 · impact firmware · CWE-770 | Yüksek8,7 | — | %0,8 | 30 Ara 2025 |
34İzleyin | CVE-2023-53965İstismar yok | SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Pathsound4 · playout ula8 firmware · CWE-428 | Yüksek8,6 | — | %0,2 | 22 Ara 2025 |
28İzleyin | CVE-2025-63220İstismar yok | The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.sound4 · first firmware · CWE-494 | Yüksek7,2 | — | %0,4 | 19 Kas 2025 |
28İzleyin | CVE-2025-63215İstismar yok | The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.sound4 · impact firmware · CWE-494 | Yüksek7,2 | — | %0,4 | 18 Kas 2025 |
27İzleyin | CVE-2022-50788İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directorysound4 · first firmware · CWE-548 | Orta6,9 | — | %0,8 | 30 Ara 2025 |
27İzleyin | CVE-2022-50790İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosuresound4 · impact firmware · CWE-306 | Orta6,9 | — | %0,7 | 30 Ara 2025 |
27İzleyin | CVE-2022-50692İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerabilitysound4 · stream extension · CWE-613 | Orta6,9 | — | %0,5 | 30 Ara 2025 |
21İzleyin | CVE-2022-50787İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scriptingsound4 · first firmware · CWE-79 | Orta5,3 | — | %0,4 | 30 Ara 2025 |
20İzleyin | CVE-2023-53961İstismar yok | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgerysound4 · impact firmware · CWE-352 | Orta5,1 | — | %0,1 | 22 Ara 2025 |
- CVE-2022-5079438İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username
KritikCVSS 9,3İstismar yokEPSS %3sound4 · impact firmware30 Ara 2025
- CVE-2023-5396338İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection
KritikCVSS 9,3İstismar yokEPSS %3sound4 · impact firmware22 Ara 2025
- CVE-2022-5079637İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi
KritikCVSS 9,3İstismar yokEPSS %1sound4 · impact firmware30 Ara 2025
- CVE-2023-5395537İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References
KritikCVSS 9,3İstismar yokEPSS %0sound4 · stream extension22 Ara 2025
- CVE-2023-5396037İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %0sound4 · first firmware22 Ara 2025
- CVE-2023-5396637İzleyin
SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow
KritikCVSS 9,3İstismar yokEPSS %0sound4 · linkandshare transmitter22 Ara 2025
- CVE-2022-5069637İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %0sound4 · first firmware30 Ara 2025
- CVE-2022-5078935İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php
YüksekCVSS 8,5İstismar yokEPSS %4sound4 · impact firmware30 Ara 2025
- CVE-2022-5079535İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php
YüksekCVSS 8,5İstismar yokEPSS %4sound4 · impact firmware30 Ara 2025
- CVE-2022-5079135İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php
YüksekCVSS 8,5İstismar yokEPSS %3sound4 · impact firmware30 Ara 2025
- CVE-2022-5079335İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php
YüksekCVSS 8,7İstismar yokEPSS %3sound4 · impact firmware30 Ara 2025
- CVE-2023-5396235İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write
YüksekCVSS 8,8İstismar yokEPSS %1sound4 · impact firmware22 Ara 2025
- CVE-2023-5396435İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0sound4 · impact firmware22 Ara 2025
- CVE-2022-5069435İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter
YüksekCVSS 8,8İstismar yokEPSS %0sound4 · impact firmware30 Ara 2025
- CVE-2025-5743135İzleyin
The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update
YüksekCVSS 8,8İstismar yokEPSS %0sound4 · pulse-eco aes67 firmware22 Eyl 2025
- CVE-2022-5079234İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability
YüksekCVSS 8,7İstismar yokEPSS %1sound4 · impact firmware30 Ara 2025
- CVE-2022-5069534İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands
YüksekCVSS 8,7İstismar yokEPSS %0sound4 · impact firmware30 Ara 2025
- CVE-2023-5396534İzleyin
SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path
YüksekCVSS 8,6İstismar yokEPSS %0sound4 · playout ula8 firmware22 Ara 2025
- CVE-2025-6322028İzleyin
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.
YüksekCVSS 7,2İstismar yokEPSS %0sound4 · first firmware19 Kas 2025
- CVE-2025-6321528İzleyin
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package.
YüksekCVSS 7,2İstismar yokEPSS %0sound4 · impact firmware18 Kas 2025
- CVE-2022-5078827İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory
OrtaCVSS 6,9İstismar yokEPSS %0sound4 · first firmware30 Ara 2025
- CVE-2022-5079027İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure
OrtaCVSS 6,9İstismar yokEPSS %0sound4 · impact firmware30 Ara 2025
- CVE-2022-5069227İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability
OrtaCVSS 6,9İstismar yokEPSS %0sound4 · stream extension30 Ara 2025
- CVE-2022-5078721İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting
OrtaCVSS 5,3İstismar yokEPSS %0sound4 · first firmware30 Ara 2025
- CVE-2023-5396120İzleyin
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery
OrtaCVSS 5,1İstismar yokEPSS %0sound4 · impact firmware22 Ara 2025