CVE-2023-53965 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated s…
High CVSS: 8.6

CVE-2023-53965

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
Vendor
Sound4
Product
Impact Firmware
CWE
CWE-428
Yayın Tarihi
2025-12-22 22:16:01
Güncelleme
2026-01-29 16:11:32
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-428 Impact Firmware HIGH Sound4 2025

Referanslar

https://web.archive.org/web/20221207074555/https://www.sound4.com/ https://www.exploit-db.com/exploits/51167 https://www.vulncheck.com/advisories/sound-server-service-local-privilege-escalation-via-unquoted-service-path https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php