CVE-2022-50788

Katalog CVE

CVSS 7.5 · High EPSS 0,83%

Kerentanan Exposure of Information Through Directory Listing pada sound4 first firmware, sound4 impact eco firmware +7 lainnya. Skor CVSS 3.1 7.5 (High) menurut vulncheck.com.

Deskripsi (NVD)

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.

Rincian

Terbit di NVD

30 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-548: Exposure of Information Through Directory Listing

EPSS (30 hari)

0,83% peluang dieksploitasi; lebih tinggi dari 56,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/247921 advisory pihak ketiga
• https://packetstormsecurity.com/files/170259/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Information-Disclosure.html exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-information-disclosure-via-log-directory advisory pihak ketiga
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5732.php exploit · advisory pihak ketiga
• https://www.sound4.com/ product