PatchTheCVECVE-2023-53961: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers t
CVE-2023-53961 is a medium-severity flaw (CVSS 4.3) affecting impact firmware, pulse firmware, first firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio processing interface, triggering unintended administrative operations when a logged-in user visits the page.
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 91%) |
| CISA exploited list | No |
| Weakness | CWE-352 |
| Published | 2025-12-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-53961?
impact firmware: mitigate or apply the listed mitigation; pulse firmware: mitigate or apply the listed mitigation; first firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-53961 being exploited?
CVE-2023-53961 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-53961 affect?
CVE-2023-53961 affects impact firmware, pulse firmware, first firmware. Severity is medium (CVSS 4.3). SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the ra
How urgent is CVE-2023-53961?
Priority 22/100. Public exploit reference
Related CVEs
- CVE-2022-50796 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the fir
- CVE-2025-63215 HIGH 7.2 MITIGATE The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious
- CVE-2023-53964 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactor
- CVE-2023-53963 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows
- CVE-2023-53962 HIGH 7.5 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows r