Sound4 vulnerabilities

Products

• First Firmware 22
• Impact Firmware 22
• Impact Eco Firmware 21
• Pulse Eco Firmware 21
• Pulse Firmware 21
• Wm2 Firmware 21
• Big Voice2 Firmware 20
• Big Voice4 Firmware 20
• Stream Extension 20

Newest

• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi CVE-2022-50796 9.3 CriticalDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php CVE-2022-50795 8.5 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username CVE-2022-50794 9.3 CriticalDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php CVE-2022-50793 8.7 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability CVE-2022-50792 8.7 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php CVE-2022-50791 8.5 HighDecember 30, 2025
• sound4 ltd. stream, kantar media wm2, sound4 big voice2 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure CVE-2022-50790 6.9 MediumDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php CVE-2022-50789 8.5 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory CVE-2022-50788 6.9 MediumDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting CVE-2022-50787 5.3 MediumDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass CVE-2022-50696 9.3 CriticalDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands CVE-2022-50695 8.7 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter CVE-2022-50694 8.8 HighDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability CVE-2022-50692 6.9 MediumDecember 30, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability CVE-2023-53964 8.8 HighDecember 22, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection CVE-2023-53963 9.3 CriticalDecember 22, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write CVE-2023-53962 8.8 HighDecember 22, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery CVE-2023-53961 5.1 MediumDecember 22, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass CVE-2023-53960 9.3 CriticalDecember 22, 2025
• kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 more SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References CVE-2023-53955 9.3 CriticalDecember 22, 2025
• sound4 linkandshare transmitter SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow CVE-2023-53966 9.3 CriticalDecember 22, 2025
• sound4 ltd. server service, sound4 big voice firmware, first firmware +13 more +15 more SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path CVE-2023-53965 8.6 HighDecember 22, 2025
• sound4 first firmware The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via... CVE-2025-63220 7.2 HighNovember 19, 2025
• sound4 impact firmware The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via... CVE-2025-63215 7.2 HighNovember 18, 2025
• sound4 pulse-eco aes67 firmware The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code... CVE-2025-57431 8.8 HighSeptember 22, 2025