CVE-2022-50793

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/247917 · Third Party Advisory
• packetstormsecurity.com/files/170264/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-services-Command-Injection.html · Exploit
• sound4.com · Product
• vulncheck.com/advisories/sound-impactfirstpulseeco-x-authenticated-command-injection-via-www-data-handlerphp · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2022-5737.php · Exploit

stream extension のその他の脆弱性

• CVE-2022-50796緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality wit…
• CVE-2022-50795高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…
• CVE-2022-50794緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. A…
• CVE-2022-50792高 7.5SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers t…
• CVE-2022-50791高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…