CVE-2022-50692— SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability
Quick assessment
Affected
SOUND4 Ltd. Impact/Pulse/First
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SOUND4 IMPACT是法国SOUND4公司的一款专业广播音频处理器。 SOUND4 IMPACT 2.x及之前版本存在代码问题漏洞，该漏洞源于会话过期机制不足，可能导致会话劫持和未经授权的访问。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-50692
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的会话过期机制
Source: CVE Program / CVE List V5
Vulnerability Title
SOUND4 IMPACT 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SOUND4 IMPACT是法国SOUND4公司的一款专业广播音频处理器。 SOUND4 IMPACT 2.x及之前版本存在代码问题漏洞，该漏洞源于会话过期机制不足，可能导致会话劫持和未经授权的访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SOUND4 Ltd. | Impact/Pulse/First | Version 2: 1.1/2.15 | - |
|
| SOUND4 Ltd. | Impact/Pulse Eco | 1.16 | - |
|
| SOUND4 Ltd. | BigVoice4 | 1.2 | - |
|
| SOUND4 Ltd. | BigVoice2 | 1.30 | - |
|
| SOUND4 Ltd. | Stream | 1.1/2.4.29 | - |
|
| Kantar Media | WM2 | 1.11 | - |
|
II. Public POCs for CVE-2022-50692
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-50692
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-50692 (2)
Exploits & Public PoCs for CVE-2022-50692 (2)
-
https://cxsecurity.com/issue/WLB-2022120030 third-party-advisory
News Coverage for CVE-2022-50692 (1)
Same Patch Batch · SOUND4 Ltd. · 2025-12-30 · 14 CVEs total
| CVE-2022-50696 | 9.8 CRITICAL | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass |
| CVE-2022-50694 | 9.8 CRITICAL | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x SQL Injection via Username Parameter |
| CVE-2022-50796 | 9.8 CRITICAL | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi |
| CVE-2022-50794 | 9.8 CRITICAL | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command Injection via Username |
| CVE-2022-50793 | 8.8 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.p |
| CVE-2022-50795 | 7.8 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php |
| CVE-2022-50789 | 7.8 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php |
| CVE-2022-50791 | 7.8 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php |
| CVE-2022-50790 | 7.5 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure |
| CVE-2022-50695 | 7.5 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands |
| CVE-2022-50792 | 7.5 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Disclosure Vulnerability |
| CVE-2022-50788 | 7.5 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory |
| CVE-2022-50787 | 7.2 HIGH | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Stored Cross-Site Scripting |
IV. Related Vulnerabilities
Same product: Impact/Pulse/First
-
CVE-2022-50796
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote C -
CVE-2022-50795
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Inje -
CVE-2022-50794
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command -
CVE-2022-50793
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command In -
CVE-2022-50792
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Dis
Same vendor: SOUND4 Ltd.
-
CVE-2022-50796
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote C -
CVE-2022-50795
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Inje -
CVE-2022-50794
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Command -
CVE-2022-50793
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command In -
CVE-2022-50792
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated File Dis
Same weakness: CWE-613
-
CVE-2026-102367
mall4j through 4.0 Insufficient Session Expiration via Token -
CVE-2026-88805
Session Not Revoked Server-Side on Logout in Rancher -
CVE-2026-100711
froxlor before 2.3.12 Authentication Bypass via Session Pers -
CVE-2026-100624
Capgo.app before 12.264.5 Upload Expiry Bypass via build upl -
CVE-2026-100554
OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
V. Comments for CVE-2022-50692
No comments yet