CVE-2022-50788

Exploit

EPSS 0.77%
Veröffentlicht 30.12.2025 22:41:36
Zuletzt bearbeitet 13.01.2026 15:09:38
Erkennungen
Login

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log Directory

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 8

NVD 12 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sound4 ≫ First Firmware Version 2.15

Sound4 ≫ First Version 2.0

Sound4 ≫ First Firmware Version 1.69

Sound4 ≫ First Version 1.0

Sound4 ≫ Impact Eco Firmware Version 1.16

Sound4 ≫ Impact Eco Version -

Sound4 ≫ Pulse Eco Firmware Version 1.16

Sound4 ≫ Pulse Eco Version -

Sound4 ≫ Big Voice4 Firmware Version 1.2

Sound4 ≫ Big Voice4 Version -

Sound4 ≫ Big Voice2 Firmware Version 1.30

Sound4 ≫ Big Voice2 Version -

Sound4 ≫ Wm2 Firmware Version 1.11

Sound4 ≫ Wm2 Version -

Sound4 ≫ Impact Firmware Version 2.15

Sound4 ≫ Impact Version 2.0

Sound4 ≫ Impact Firmware Version 1.69

Sound4 ≫ Impact Version 1.0

Sound4 ≫ Pulse Firmware Version 2.15

Sound4 ≫ Pulse Version 2.0

Sound4 ≫ Pulse Firmware Version 1.69

Sound4 ≫ Pulse Version 1.0

Sound4 ≫ Stream Extension Version 2.4.29

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.77%	0.526

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
disclosure@vulncheck.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
disclosure@vulncheck.com	6.9	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X