First Firmware
1 CVEs
product
Monthly
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RCE
First Firmware
NVD
GitHub
CVSS 3.1
7.2
EPSS
0.3%
CVE-2025-63220
EPSS 0%
CVSS 7.2
HIGH
POC
This Month
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RCE
First Firmware
NVD
GitHub