CVE-2022-50696
CriticalSummary
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal device operations. Attackers can leverage these static credentials to gain unauthorized access to the device across Linux and Windows distributions without requiring user interaction.
Risk Assessment
The risk for the organization is the possibility of unauthorized device access by third parties, potentially leading to device takeover and network security compromise.
Recommendation
It is recommended to immediately change all default credentials to unique, strong passwords and implement access monitoring mechanisms for the devices.
Original NVD description (English source)
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal device operations. Attackers can leverage these static credentials to gain unauthorized access to the device across Linux and Windows distributions without requiring user interaction.