Unrated severityNVD Advisory· Published Dec 30, 2025· Updated Jan 16, 2026
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.php
CVE-2022-50795
Description
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the traceroute.php script, which triggers the malicious file and then deletes it after execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=2.x
- Range: <=2.x
- Range: Version 2: 1.1/2.15
Patches
Vulnerability mechanics
References
5- packetstormsecurity.com/files/170267/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-traceroute.php-Conditional-Command-Injection.htmlmitreexploit
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-conditional-command-injection-via-traceroutephpmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5740.phpmitrethird-party-advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/247950mitrevdb-entry
- www.sound4.commitreproduct
News mentions
0No linked articles in our index yet.