Vulnerability in Sound4 Big Voice
CVE-2023-53965
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
EPSS: 0.002 (13.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Sound4 Big_voice
- Sound4 Big_voice_firmware — versions 4.1.102
- Sound4 First
- Sound4 First_firmware — versions 4.1.102
- Sound4 Impact
- Sound4 Impact_eco
- Sound4 Impact_eco_firmware — versions 4.1.102
- Sound4 Impact_firmware — versions 4.1.102
- Sound4 Ip_connect
- Sound4 Ip_connect_firmware — versions 4.1.102
Weakness classification (CWE)
References
- disclosure@vulncheck.com (Exploit, Third Party Advisory, exploit)
- disclosure@vulncheck.com (Product, product)
- disclosure@vulncheck.com (Exploit, Third Party Advisory, third-party-advisory)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2023-53965?
- CVE-2023-53965 is a high-severity vulnerability in Sound4 Big Voice, classified under Unquoted Search Path or Element. CVSS score: 8.4/10. Published 2025-12-22.
- How severe is CVE-2023-53965?
- High severity. CVSS v3 base score is 8.4 out of 10.