VULNERABILITY INTELLIGENCE

CVE-2022-50795

CVSS score8.5 HIGH

EPSS probability4.16%

CISA KEVNot currently listed

Published2025-12-30

Last modified2026-06-17

Description

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the traceroute.php script, which triggers the malicious file and then deletes it after execution.