CVE-2023-53965
Full vulnerability record from the local CVENow database.
Description
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
Severity
HIGH
CVSS score
8.6
(v4.0)
Vulnerability status
Analyzed
Source identifier
Published
2025-12-22 22:16:01.027000
Last modified
2026-10-28 19:10:00.193000
View original CVE JSON
{
"id": "CVE-2023-53965",
"sourceIdentifier": "[email protected]",
"published": "2025-12-22T22:16:01.027",
"lastModified": "2026-10-28T19:10:00.193",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup."
},
{
"lang": "es",
"value": "El Servicio SOUND4 Server 4.1.102 contiene una vulnerabilidad de ruta de servicio sin comillas que permite a usuarios locales no privilegiados ejecutar código con privilegios de sistema elevados. Los atacantes pueden explotar la ruta binaria sin comillas insertando código malicioso en la ruta raíz del sistema que podría ejecutarse con privilegios de LocalSystem durante el inicio del servicio."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SOUND4 Ltd.",
"product": "SOUND4 Server Service",
"versions": [
{
"version": "4.1.102",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-22T21:59:54.557423Z",
"id": "CVE-2023-53965",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-428"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:playout_ula8_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "D4799D50-72B6-41FE-A409-6D12650850CC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:playout_ula8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4AB3706D-7E81-478B-9B35-4391AA0F8979"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:stream_x8_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "6B99D3F1-11C0-48B4-9963-61FC35C12241"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:stream_x8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D78DEB52-89D1-4A0F-808C-78B638020E1E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:stream_x4_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "A1551CE2-B783-4895-A751-9B1C3F40FB55"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:stream_x4:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F07D37E6-43F0-407A-B0F0-04B9014E9626"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:stream_x2_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "57286B3B-62D8-4E46-935D-CFA67DCB17AD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:stream_x2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8C630D7E-C2CF-4D9A-80B8-7043E28B3BF0"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:wm2_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "F1D09D53-22B8-4662-A894-4FB5BCD4C7B5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:wm2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ED8E14DD-2C04-4080-AAE9-6D770436AC6C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:ip_connect_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "4676E944-523D-4A74-88EB-403F819ED8E8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:ip_connect:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6E3CCF25-20FF-432D-8E9E-A2DDBFB681CC"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:voice_ula8_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "C4624510-A2C9-49CB-A32B-412139246940"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:voice_ula8:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C62FD67C-2F89-4BDA-A8F7-088EC08A1FC1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:voice_ula4_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "350F2E22-AC74-43DC-86F5-76ED08BFCBE9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:voice_ula4:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E9202182-A3C7-495F-BC52-37681131A9F6"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:voice_ula2_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "A8B2EB3A-58D1-4A25-AEFD-CE48EDC607A1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:voice_ula2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "33D972CD-FD11-4856-AE4C-9DBE1D66A4E1"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:big_voice_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "035BBBC0-C9F3-4139-8B29-DFE3D5592350"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:big_voice:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5DD2E9A8-22CA-424F-BA32-DF28A4E1321F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:pulse_eco_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "FA715E1D-8136-4FF8-AF14-DBA96A9DB5E7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:pulse_eco:-:*:*:*:*:*:*:*",
"matchCriteriaId": "71E155FD-162E-4EA9-9BD9-89384B3AD175"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:impact_eco_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "EAC64E89-392E-4F15-B8E7-8E252BBA5BA4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:impact_eco:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B4B0A611-C50E-4397-ACDF-8D090D4AFC88"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:first_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "B922347D-A2D6-4198-B679-19D9214CB4C2"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:first:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0ECA96F8-4038-4257-84DA-9D17BA0A9198"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:pulse_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "FF69B79F-EE2B-4729-B3DD-611BDD6FA0B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:pulse:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8EF56652-B226-4487-9757-F3114DAD358E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:sound4:impact_firmware:4.1.102:*:*:*:*:*:*:*",
"matchCriteriaId": "03E70884-24F6-46C3-97BE-93AED751BF6B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:sound4:impact:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CF502CEB-F8A3-4161-B78A-338F3108A1CF"
}
]
}
]
}
],
"references": [
{
"url": "https://web.archive.org/web/20221207074555/https://www.sound4.com/",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://www.exploit-db.com/exploits/51167",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-via-unquoted-service-path",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}