CVEvulnerability
CVE-2022-50692
6.9 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-12-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.9 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-613
Description
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.
Affected configurations
• sound4 stream extension 2.4.29
• sound4 wm2 firmware 1.11
• sound4 big voice2 firmware 1.30
• sound4 big voice4 firmware 1.2
• sound4 pulse eco firmware 1.16
• sound4 impact eco firmware 1.16
• sound4 first firmware 1.69
• sound4 first firmware 2.15
• sound4 pulse firmware 1.69
• sound4 pulse firmware 2.15
• sound4 impact firmware 1.69
• sound4 impact firmware 2.15
Related
Weakness · not in database (1)
References
- https://cxsecurity.com/issue/WLB-2022120030 Exploit, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/247956 Third Party Advisory
- https://packetstormsecurity.com/files/170251/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Insufficient-Session-Expiration.html Exploit, Third Party Advisory
- https://www.sound4.com/ Product
- https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-insufficient-session-expiration-vulnerability Third Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5724.php Exploit, Third Party Advisory