CVE-2022-50795

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/247950 · Third Party Advisory
• packetstormsecurity.com/files/170267/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-traceroute.php-Conditional-Command-Injection.html · Exploit
• sound4.com · Product
• vulncheck.com/advisories/sound-impactfirstpulseeco-x-conditional-command-injection-via-traceroutephp · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2022-5740.php · Exploit

stream extension のその他の脆弱性

• CVE-2022-50796緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality wit…
• CVE-2022-50794緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. A…
• CVE-2022-50793高 8.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows…
• CVE-2022-50792高 7.5SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers t…
• CVE-2022-50791高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…