CVE-2023-53955

概要

参考情報

• web.archive.org/web/20221207074555/https://www.sound4.com · Product
• exploit-db.com/exploits/51169 · Exploit
• vulncheck.com/advisories/sound-impactfirstpulseeco-x-authorization-bypass-via-insecure-object-references · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2022-5723.php · Exploit

stream extension のその他の脆弱性

• CVE-2022-50796緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality wit…
• CVE-2022-50795高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…
• CVE-2022-50794緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. A…
• CVE-2022-50793高 8.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows…
• CVE-2022-50792高 7.5SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers t…