CVE-2022-50792

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/247916 · Third Party Advisory
• packetstormsecurity.com/files/170263/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Unauthenticated-File-Disclosure.html · Exploit
• sound4.com · Product
• vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-file-disclosure-vulnerability · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2022-5736.php · Exploit

stream extension のその他の脆弱性

• CVE-2022-50796緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality wit…
• CVE-2022-50795高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…
• CVE-2022-50794緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. A…
• CVE-2022-50793高 8.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows…
• CVE-2022-50791高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…