Vulnerability in Sound4 Big Voice
CVE-2023-53965
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (13.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 13.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Sound4 Big Voice
- Sound4 Big Voice Firmware — versions 4.1.102
- Sound4 First
- Sound4 First Firmware — versions 4.1.102
- Sound4 Impact
- Sound4 Impact Eco
- Sound4 Impact Eco Firmware — versions 4.1.102
- Sound4 Impact Firmware — versions 4.1.102
- Sound4 Ip Connect
- Sound4 Ip Connect Firmware — versions 4.1.102
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/51167 (Exploit, Third Party Advisory, exploit)
- web.archive.org/web/20221207074555/https://www.sound4.com/ (Product, product)
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php (Exploit, Third Party Advisory, third-party-advisory)
- www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-vi… (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2023-53965?
- CVE-2023-53965 is a high-severity vulnerability in Sound4 Big Voice, classified under Unquoted Search Path or Element. CVSS score: 8.4/10. Published 2025-12-22.
- How severe is CVE-2023-53965?
- High severity. CVSS v3 base score is 8.4 out of 10.