PT-2025-54240 · Pulse+3 · Pulse+3

Published 2025-12-30 · Updated 2025-12-31 · CVE-2022-50792

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below

Description The software contains an unauthenticated file disclosure issue that allows remote attackers to access sensitive system files. Attackers can exploit the issue by manipulating the file GET parameter to disclose arbitrary files on the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-50792

Affected Products

Eco

First

Pulse

Sound4 Impact

References · 10

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2022-5736.php · Exploit
• 🔥 https://packetstormsecurity.com/files/170263/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Unauthenticated-File-Disclosure.html · Exploit
• https://osv.dev/vulnerability/CVE-2022-50792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50792 · Security Note
• https://twitter.com/CVEnew/status/2006332254092726678 · Twitter Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247916 · Note
• https://twitter.com/CveFindCom/status/2006148250647065072 · Twitter Post
• https://vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauthenticated-file-disclosure-vulnerability · Note
• https://t.me/CVEtracker/40996 · Telegram Post
• https://sound4.com · Note