CVE-2022-50796

CriticalCVSS 9.8

Published: 30/12/2025(UTC)Updated: 24/09/2026(UTC)Translated: 25/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.59%

75th percentile - higher than 75% of all known CVEs

Summary

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with a path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution.

Risk Assessment

An unauthenticated attacker can write malicious files and execute code as www-data, leading to device compromise. This can result in complete loss of confidentiality, integrity, and availability.

Recommendation

Update firmware to a version later than 2.x if available; otherwise isolate devices on the network and restrict access to the web interface.

Other vulnerabilities in SOUND4 IMPACT/FIRST/PULSE/Eco

CVE-2023-53964Critical
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass authentication, gaining full system control.

Original NVD description (English source)

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution.