CVE-2023-53955

CRITICAL 9.8CVE-2023-53955 · Published 22/12/2025 · updated 17/06/2026

In short

CVE-2023-53955 is a CRITICAL (CVSS 9.8) vulnerability affecting stream extension (sound4).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
stream extension sound4	`= 2.4.29`	No fix yet

Description

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without proper authentication.

References

web.archive.org/web/20221207074555/https://www.sound4.com · Product
exploit-db.com/exploits/51169 · Exploit
vulncheck.com/advisories/sound-impactfirstpulseeco-x-authorization-bypass-via-insecure-object-references · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2022-5723.php · Exploit

More vulnerabilities in stream extension

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

stream extension

sound4

= 2.4.29

No fix yet

Description

More vulnerabilities in stream extension

See all →