Unrated severityNVD Advisory· Published Dec 22, 2025· Updated Dec 22, 2025
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References
CVE-2023-53955
Description
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without proper authentication.
Affected products
1- Range: Version 2: 1.1/2.15
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/51169mitreexploit
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-authorization-bypass-via-insecure-object-referencesmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5723.phpmitrethird-party-advisory
- web.archive.org/web/20221207074555/https://www.sound4.com/mitreproduct
News mentions
0No linked articles in our index yet.