Description

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

INFO

Published Date :

2025-12-30T22:41:33.949Z

Last Modified :

2026-01-05T19:27:58.810Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2022-50692 vulnerability.

Vendors Products
Sound4
  • Big Voice2
  • Big Voice2 Firmware
  • Big Voice4
  • Big Voice4 Firmware
  • Bigvoice2
  • Bigvoice4
  • First
  • First Firmware
  • Impact
  • Impact Eco
  • Impact Eco Firmware
  • Impact Firmware
  • Pulse
  • Pulse-eco
  • Pulse Eco
  • Pulse Eco Firmware
  • Pulse Firmware
  • Stream
  • Stream Extension
  • Wm2
  • Wm2 Firmware

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact