High severity7.2NVD Advisory· Published Nov 18, 2025· Updated Jun 17, 2026
CVE-2025-63215
CVE-2025-63215
Description
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:sound4:impact_firmware:2.33:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
3- github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63215%20_%20Sound4%20IMPACT%20%20RCEnvdExploitThird Party Advisory
- www.sound4helpdesk.comnvdProduct
- www.sound4helpdesk.com/impact-downloads/nvdProduct
News mentions
0No linked articles in our index yet.