CVE-2023-53960

The attacker sends an HTTP POST request to the 'index.php' file, injecting malicious SQL code into the 'password' parameter. The authentication mechanism does not properly filter input data, allowing manipulation of the SQL query that verifies login credentials. As a result, the query returns a positive result regardless of the actual password value, enabling unauthorized access to the system. A public exploit for this vulnerability is available on Exploit-DB.

An attacker can remotely and without authentication gain unauthorized access to the SOUND4 device management system. This results in complete compromise of the confidentiality and integrity of data accessible through the administrative panel.

Apply patches available from the manufacturer according to the references provided. Additionally, until the update is implemented, it is recommended to restrict access to the device's web interface only to trusted networks or IP addresses using a firewall, and to implement network segmentation.

SOUND4 IMPACT, SOUND4 FIRST, SOUND4 PULSE, SOUND4 Eco, SOUND4 Big Voice2, SOUND4 Big Voice4 — firmware version 2.x