CVE-2023-53961 - CVE House

Back to Database

Status published Medium CVE-2023-53961

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery

5.1 CVSS

Vulnerability Description

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio processing interface, triggering unintended administrative operations when a logged-in user visits the page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53961

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

LiquidWorm as Gjoko Krstic of Zero Science Lab

References

More from SOUND4 Ltd.

View All →

SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write

Affected Vendor

SOUND4 Ltd.

View all reports →

Affected Software

Impact/Pulse/First, Impact/Pulse Eco, BigVoice4, BigVoice2, Stream, WM2

Vulnerable Versions:

Version 2: 1.1/2.15, 1.16, 1.2, 1.30, 1.1/2.4.29, 1.11

Timeline

Official Publish: December 22nd, 2025

Last Modified: January 16th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1566.002 Spearphishing Link

T1204.001 Malicious Link

T1098 Account Manipulation

T1565.001 Stored Data Manipulation