Description
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
Affected products
sound4: playout ula8 firmware; sound4: playout ula8; sound4: stream x8 firmware; sound4: stream x8; sound4: stream x4 firmware; sound4: stream x4; sound4: stream x2 firmware; sound4: stream x2; sound4: wm2 firmware; sound4: wm2; sound4: ip connect firmware; sound4: ip connect; sound4: voice ula8 firmware; sound4: voice ula8; sound4: voice ula4 firmware
References5
- www.exploit-db.com/exploits/51167 ExploitThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php ExploitThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5721.php ExploitThird Party Advisory
- web.archive.org/web/20221207074555/www.sound4.com/ Product
- www.vulncheck.com/advisories/sound-server-service-local-privile… Third Party Advisory
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
8.6
HIGH
Score source: CNA
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 15 · as of 11 November 2026
- CWE
- CWE-428
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.