Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 10 min 165 bronnen 1 kritiek 16 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2023-53965

HIGH · 8.4 CVSS Gepubliceerd: CWE-428

Beschrijving

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.

Vendors

Sound4

Affected products

Playout Ula8 Firmware Playout Ula8 Stream X8 Firmware Stream X8 Stream X4 Firmware Stream X4 Stream X2 Firmware Stream X2 Wm2 Firmware Wm2 Ip Connect Firmware Ip Connect Voice Ula8 Firmware Voice Ula8 Voice Ula4 Firmware Voice Ula4 Voice Ula2 Firmware Voice Ula2 Big Voice Firmware Big Voice Pulse Eco Firmware Pulse Eco Impact Eco Firmware Impact Eco First Firmware First Pulse Firmware Pulse Impact Firmware Impact

References