Medium severity4.3NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026
CVE-2023-53961
CVE-2023-53961
Description
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio processing interface, triggering unintended administrative operations when a logged-in user visits the page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14- cpe:2.3:a:sound4:stream_extension:2.4.29:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:big_voice2_firmware:1.30:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:big_voice4_firmware:1.2:*:*:*:*:*:*:*
cpe:2.3:o:sound4:first_firmware:1.69:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:first_firmware:1.69:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:first_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:impact_eco_firmware:1.16:*:*:*:*:*:*:*
cpe:2.3:o:sound4:impact_firmware:1.69:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:impact_firmware:1.69:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:impact_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:pulse_eco_firmware:1.16:*:*:*:*:*:*:*
cpe:2.3:o:sound4:pulse_firmware:1.69:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sound4:pulse_firmware:1.69:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:pulse_firmware:2.15:*:*:*:*:*:*:*
- cpe:2.3:o:sound4:wm2_firmware:1.11:*:*:*:*:*:*:*
v2.x+ 1 more
- (no CPE)range: v2.x
- (no CPE)range: Version 2: 1.1/2.15
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/51168nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5722.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-cross-site-request-forgerynvdThird Party Advisory
- web.archive.org/web/20221207074555/https://www.sound4.com/nvdProduct
News mentions
0No linked articles in our index yet.