CVE-2022-50692

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Insufficient Session Expiration Vulnerability

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

Affected

SOUND4 Ltd. · Kantar Media · Impact/Pulse/First · Impact/Pulse Eco · BigVoice4 · BigVoice2 · Stream · WM2

CVSS v4.0 VULNCHECK

6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULNCHECK

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.58% chance of exploitation in the next 30 days, 47th percentile

Published

2025-12-30

Updated

2026-10-01

Proof-of-concept exploits (1)

• https://packetstormsecurity.com/files/170251/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Insufficie…

Security advisories

• https://cxsecurity.com/issue/WLB-2022120030
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247956
• https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-insufficient-session-exp…
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5724.php
• https://www.sound4.com

References

• CVE Record
• NVD entry