Unrated severityNVD Advisory· Published Dec 30, 2025· Updated Jan 16, 2026
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php
CVE-2022-50791
Description
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the vulnerable ping.php script, which triggers the malicious file and then deletes it.
Affected products
1- Range: Version 2: 1.1/2.15
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- packetstormsecurity.com/files/170262/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-ping.php-Command-Injection.htmlmitreexploit
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-conditional-command-injection-via-pingphpmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5735.phpmitrethird-party-advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/247915mitrevdb-entry
- www.sound4.commitreproduct
News mentions
0No linked articles in our index yet.