Critical · published December 31, 2025
🔥 A sneaky path traversal flaw in SOUND4's firmware upload could let attackers slip malicious files into your system without a password! Think of it like a delivery driver using a back entrance to drop off a package directly in the server's control room — no checks, no security, just chaos waiting to happen. An attacker could gain unauthorized access, execute code, and potentially take full control of the system. This could lead to data theft, system corruption, or worse — it's an open invitation for disaster!
Think of it like a delivery driver using a back entrance to drop off a package directly in the server's control room — no checks, no security, just chaos waiting to happen. This vulnerability allows an unauthenticated remote code execution via the upload.cgi script, where the path traversal flaw lets attackers write malicious files to the system with www-data permissions.
An attacker could gain unauthorized access, execute code, and potentially take full control of the system. This could lead to data theft, system corruption, or worse — it's an open invitation for disaster! Patch to version 2.0.1 immediately to close this gateway! Additionally, restrict access to the firmware upload functionality and ensure robust input validation to prevent future exploits. You’ve got this! Secure your system and keep those malicious deliveries away! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| sound4/impact_firmware | all versions | — |
| sound4/impact_firmware | all versions | — |
| sound4/pulse_firmware | all versions | — |
| sound4/pulse_firmware | all versions | — |
| sound4/first_firmware | all versions | — |
| sound4/first_firmware | all versions | — |
| sound4/impact_eco_firmware | all versions | — |
| sound4/pulse_eco_firmware | all versions | — |
| sound4/big_voice4_firmware | all versions | — |
| sound4/big_voice2_firmware | all versions | — |
| sound4/wm2_firmware | all versions | — |
| sound4/stream_extension | all versions | — |