Paper/Archive/CVE-2022-50796

CVE-2022-50796

SOUND4 Ltd. Impact/Pulse/First — SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Remote Code Execution via upload.cgi

EPSS 2%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 75.3.753 × 2015.1 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized access and code execution.

Affected

ProductAffectedFixed inSource

Impact/Pulse/FirstVersion 2: 1.1/2.15–CNA

Impact/Pulse Eco1.16–CNA

BigVoice41.2–CNA

BigVoice21.30–CNA

Stream1.1/2.4.29–CNA

WM21.11–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupzeroscience.mk/en/vulnerabilities/ZSL-2022-5741.php exploitpacketstormsecurity.com/files/170268/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-upload.cgi-Code-Execution.html refexchange.xforce.ibmcloud.com/vulnerabilities/247951 refsound4.com writeupvulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-remote-code-execution-via-uploadcgi