CVE-2022-50788

moderate-risk
Published 2025-12-30

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.

Do I need to act?

-
0.54% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (12)

Affected Vendors

Sound4

References (5)

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/247921
Exploit https://packetstormsecurity.com/files/170259/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-I...
Product https://www.sound4.com/
Third Party Advisory https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-information-dis...
Exploit https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5732.php
45
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 17/34 · Moderate