by Kastro
Paper/Archive/CVE-2023-53964

CVE-2023-53964

SOUND4 Ltd. Impact/Pulse/First — SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability

EPSS 1.0%public exploitCVSS 9.8
critical.is priorityof 100
52
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 62.1.621 × 2012.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass authentication, gaining full system control.

Affected

ProductAffectedFixed inSource
Impact/Pulse/FirstVersion 2: 1.1/2.15–CNA
Impact/Pulse Eco1.16–CNA
BigVoice41.2–CNA
BigVoice21.30–CNA
Stream1.1/2.4.29–CNA
WM21.11–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

exploitexploit-db.com/exploits/51174refweb.archive.org/web/20221207074555/https://www.sound4.comexploitzeroscience.mk/en/vulnerabilities/ZSL-2022-5742.phpwriteupvulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-factory-reset-vulnerability