← Database

CVE-2022-50692

HIGH CVSS: 7.5 Published: 2025-12-30 Modified: 2026-06-17

Description

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

Affected Platforms

Sound4 Impact EcoSound4 Wm2Sound4 Big Voice4 FirmwareSound4 Big Voice2Sound4 Big Voice4Sound4 ImpactSound4 PulseSound4 FirstSound4 Stream ExtensionSound4 Pulse Firmware

Weakness Type

CWE-613

References