CVE-2022-50796

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/247951 · Third Party Advisory
• packetstormsecurity.com/files/170268/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-upload.cgi-Code-Execution.html · Exploit
• sound4.com · Product
• vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-remote-code-execution-via-uploadcgi · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2022-5741.php · Exploit

stream extension のその他の脆弱性

• CVE-2022-50795高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…
• CVE-2022-50794緊急 9.8SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated command injection vulnerability in the username parameter. A…
• CVE-2022-50793高 8.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an authenticated command injection vulnerability in the www-data-handler.php script that allows…
• CVE-2022-50792高 7.5SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated file disclosure vulnerability that allows remote attackers t…
• CVE-2022-50791高 7.8SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create m…