Critical severity9.8NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026
CVE-2023-53960
CVE-2023-53960
Description
SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter to bypass authentication and potentially gain unauthorized access to the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
142.x+ 1 more
- (no CPE)range: 2.x
- (no CPE)range: Version 2: 1.1/2.15
cpe:2.3:o:sound4:first_firmware:2.15:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:first_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:first_firmware:1.69:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:impact_eco_firmware:1.16:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:pulse_eco_firmware:1.16:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:big_voice4_firmware:1.2:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:big_voice2_firmware:1.30:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:wm2_firmware:1.11:*:*:*:*:*:*:*
cpe:2.3:o:sound4:impact_firmware:2.15:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:impact_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:impact_firmware:1.69:*:*:*:*:*:*:*
cpe:2.3:o:sound4:pulse_firmware:2.15:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:pulse_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:pulse_firmware:1.69:*:*:*:*:*:*:*
- cpe:2.3:a:sound4:stream_extension:2.4.29:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/51171nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5726.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-sql-injection-via-authentication-bypassnvdThird Party Advisory
- web.archive.org/web/20221207074555/https://www.sound4.com/nvdProduct
News mentions
0No linked articles in our index yet.