PatchTheCVEpulse firmware vulnerabilities and fixes
Recent CVEs affecting pulse firmware, with upgrade or downgrade steps. 14 tracked.
Also searched as: pulsefirmware.
pulse firmware has 14 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-12-30. Highest priority: CVE-2023-53963 (score 70/100).
- CVE-2022-50796 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the fir
- CVE-2023-53964 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactor
- CVE-2023-53963 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows
- CVE-2023-53962 HIGH 7.5 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows r
- CVE-2023-53961 MEDIUM 4.3 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers t
- CVE-2022-50795 HIGH 7.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local a
- CVE-2022-50794 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerabilit
- CVE-2022-50793 HIGH 8.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-
- CVE-2022-50792 HIGH 7.5 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability
- CVE-2022-50791 HIGH 7.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local a
- CVE-2022-50790 HIGH 7.5 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remo
- CVE-2022-50789 HIGH 7.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a command injection vulnerability that allows local authenticated
- CVE-2022-50695 HIGH 7.5 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attack
- CVE-2022-50694 CRITICAL 9.8 MITIGATE MITIGATE SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter o
FAQ
How do I fix pulse firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pulse firmware being exploited right now?
None of the tracked pulse firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pulse firmware CVE should I patch first?
CVE-2023-53963 currently ranks highest (70/100): SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows .