CVE-2022-50796

CRÍTICO 9.8CVE-2022-50796 · Published 30/12/2025 · updated 24/09/2026

Em resumo

CVE-2022-50796 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta stream extension (sound4).
Chance de exploração nos próximos 30 dias (EPSS): 1.6%, maior que 75.3% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
stream extension sound4	`= 2.4.29`	No fix yet

Description

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution.

References

exchange.xforce.ibmcloud.com/vulnerabilities/247951 · Third Party Advisory
packetstormsecurity.com/files/170268/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-upload.cgi-Code-Execution.html · Exploit
sound4.com · Product
vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-remote-code-execution-via-uploadcgi · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2022-5741.php · Exploit

Mais vulnerabilidades de stream extension

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

stream extension

sound4

= 2.4.29

No fix yet

Description

Mais vulnerabilidades de stream extension

Ver tudo →