What’s Vulnerable › Products

Sound4 First Firmware vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your Sound4 First Firmware version is affected

Latest Sound4 First Firmware vulnerabilities

• CVE-2022-50796 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi (CVSS 9.8)
• CVE-2022-50795 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php (CVSS 7.8)
• CVE-2022-50794 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username (CVSS 9.8)
• CVE-2022-50793 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php (CVSS 8.8)
• CVE-2022-50792 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability (CVSS 7.5)
• CVE-2022-50791 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php (CVSS 7.8)
• CVE-2022-50790 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure (CVSS 7.5)
• CVE-2022-50789 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php (CVSS 7.8)
• CVE-2022-50788 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory (CVSS 7.5)
• CVE-2022-50787 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2022-50696 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass (CVSS 9.8)
• CVE-2022-50695 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands (CVSS 7.5)
• CVE-2022-50694 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter (CVSS 9.8)
• CVE-2022-50692 — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability (CVSS 7.5)
• CVE-2023-53965 — SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path (CVSS 7.8)
• CVE-2023-53964 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability (CVSS 9.8)
• CVE-2023-53963 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection (CVSS 9.8)
• CVE-2023-53962 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write (CVSS 7.5)
• CVE-2023-53961 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery (CVSS 4.3)
• CVE-2023-53960 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass (CVSS 9.8)
• CVE-2023-53955 — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References (CVSS 9.8)
• CVE-2025-63220 — (CVSS 7.2)