CVE-2022-44038: Russound Xsourceplayer 777d Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.

Affected products

• Russound Xsourceplayer 777d Firmware: version 06.08.03 only

Published 2022-11-29. Last modified 2026-06-17.