{"id": "CVE-2023-53965", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-12-22T22:16:01.027", "references": [{"url": "https://web.archive.org/web/20221207074555/https://www.sound4.com/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/51167", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-via-unquoted-service-path", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php", "tags": ["Third Party Advisory", "Exploit"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php", "tags": ["Third Party Advisory", "Exploit"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-428"}]}], "descriptions": [{"lang": "en", "value": "SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup."}], "lastModified": "2026-01-29T16:11:32.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:impact_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03E70884-24F6-46C3-97BE-93AED751BF6B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:impact:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CF502CEB-F8A3-4161-B78A-338F3108A1CF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:pulse_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF69B79F-EE2B-4729-B3DD-611BDD6FA0B7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:pulse:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8EF56652-B226-4487-9757-F3114DAD358E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:first_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B922347D-A2D6-4198-B679-19D9214CB4C2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:first:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0ECA96F8-4038-4257-84DA-9D17BA0A9198"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:impact_eco_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAC64E89-392E-4F15-B8E7-8E252BBA5BA4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:impact_eco:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4B0A611-C50E-4397-ACDF-8D090D4AFC88"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:pulse_eco_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA715E1D-8136-4FF8-AF14-DBA96A9DB5E7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:pulse_eco:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "71E155FD-162E-4EA9-9BD9-89384B3AD175"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:big_voice_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "035BBBC0-C9F3-4139-8B29-DFE3D5592350"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:big_voice:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DD2E9A8-22CA-424F-BA32-DF28A4E1321F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:voice_ula2_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8B2EB3A-58D1-4A25-AEFD-CE48EDC607A1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:voice_ula2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33D972CD-FD11-4856-AE4C-9DBE1D66A4E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:voice_ula4_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "350F2E22-AC74-43DC-86F5-76ED08BFCBE9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:voice_ula4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E9202182-A3C7-495F-BC52-37681131A9F6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:voice_ula8_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4624510-A2C9-49CB-A32B-412139246940"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:voice_ula8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C62FD67C-2F89-4BDA-A8F7-088EC08A1FC1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:ip_connect_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4676E944-523D-4A74-88EB-403F819ED8E8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:ip_connect:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6E3CCF25-20FF-432D-8E9E-A2DDBFB681CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:wm2_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1D09D53-22B8-4662-A894-4FB5BCD4C7B5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:wm2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED8E14DD-2C04-4080-AAE9-6D770436AC6C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:stream_x2_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57286B3B-62D8-4E46-935D-CFA67DCB17AD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:stream_x2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8C630D7E-C2CF-4D9A-80B8-7043E28B3BF0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:stream_x4_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1551CE2-B783-4895-A751-9B1C3F40FB55"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:stream_x4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F07D37E6-43F0-407A-B0F0-04B9014E9626"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:stream_x8_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B99D3F1-11C0-48B4-9963-61FC35C12241"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:stream_x8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D78DEB52-89D1-4A0F-808C-78B638020E1E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sound4:playout_ula8_firmware:4.1.102:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4799D50-72B6-41FE-A409-6D12650850CC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sound4:playout_ula8:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4AB3706D-7E81-478B-9B35-4391AA0F8979"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "disclosure@vulncheck.com"}
