Security Advisory
CVE-2025-63220
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.