Advisories · Technology
Kantar Media WM2.
Every CVE that names Kantar Media WM2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Path traversal
- CVSS 8.5 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 8.7 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.php
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 8.7 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Path traversal
- CVSS 8.5 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 6.9 Medium
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Authentication bypass
- CVSS 8.5 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 6.9 Medium
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- CWE-548
- CVSS 5.3 Medium
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Hard-coded credentials
- CVSS 8.7 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Denial of service
- CVSS 8.8 High
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- SQL injection
- CVSS 6.9 Medium
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Authentication bypass
- CVSS 8.8 High
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Command injection
- CVSS 8.8 High
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Directory Traversal File Write
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Path traversal
- CVSS 5.1 Medium
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Cross-Site Request Forgery
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Cross-site request forgery (CSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x SQL Injection via Authentication Bypass
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References
- SOUND4 Ltd. Impact/Pulse/First
- SOUND4 Ltd. Impact/Pulse Eco
- Broken access control