CVE-2023-53965: wm2 — Exploit

Description

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.

Is your site exposed to CVE-2023-53965?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-428 CWE-428

Affected Products

Vendor	Product	Versions
sound4	impact_firmware	All
sound4	impact	All
sound4	pulse_firmware	All
sound4	pulse	All
sound4	first_firmware	All
sound4	first	All
sound4	impact_eco_firmware	All
sound4	impact_eco	All
sound4	pulse_eco_firmware	All
sound4	pulse_eco	All
sound4	big_voice_firmware	All
sound4	big_voice	All
sound4	voice_ula2_firmware	All
sound4	voice_ula2	All
sound4	voice_ula4_firmware	All
sound4	voice_ula4	All
sound4	voice_ula8_firmware	All
sound4	voice_ula8	All
sound4	ip_connect_firmware	All
sound4	ip_connect	All
sound4	wm2_firmware	All
sound4	wm2	All
sound4	stream_x2_firmware	All
sound4	stream_x2	All
sound4	stream_x4_firmware	All
sound4	stream_x4	All
sound4	stream_x8_firmware	All
sound4	stream_x8	All
sound4	playout_ula8_firmware	All
sound4	playout_ula8	All

References

Exploits

https://www.exploit-db.com/exploits/51167 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php

Other References

https://web.archive.org/web/20221207074555/https://www.sound4.com/ https://www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-via-unquoted-service-path

Frequently Asked Questions

What is CVE-2023-53965? +

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup. It has a CVSS v3.1 base score of 8.4 (HIGH).

How severe is CVE-2023-53965? +

CVE-2023-53965 has a CVSS v3.1 score of 8.4 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2023-53965? +

CVE-2023-53965 affects products from sound4, specifically: big_voice, big_voice_firmware, first, first_firmware, impact, impact_eco, impact_eco_firmware, impact_firmware, ip_connect, ip_connect_firmware, playout_ula8, playout_ula8_firmware, pulse, pulse_eco, pulse_eco_firmware, pulse_firmware, stream_x2, stream_x2_firmware, stream_x4, stream_x4_firmware, stream_x8, stream_x8_firmware, voice_ula2, voice_ula2_firmware, voice_ula4, voice_ula4_firmware, voice_ula8, voice_ula8_firmware, wm2, wm2_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-53965? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-3640

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. …

CVE-2024-58288

Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the …

CVE-2025-8070

The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability. This allows a local attacker …

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges …

CVE-2020-36879

Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during …

CVE-2025-34499

AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with …