CVE-2022-50692

Published: Dec 30, 2025Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

Affected (12)

Products: Sound4: Stream Extension, Wm2 Firmware, Big Voice2 Firmware, Big Voice4 Firmware, Pulse Eco Firmware, Impact Eco Firmware, First Firmware, Pulse Firmware, Impact Firmware

9 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sound4 Stream Extension	Version 2.4.29

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Wm2 Firmware	Version 1.11

Running on/with	Platform Versions
Sound4 Wm2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Big Voice2 Firmware	Version 1.30

Running on/with	Platform Versions
Sound4 Big Voice2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Big Voice4 Firmware	Version 1.2

Running on/with	Platform Versions
Sound4 Big Voice4	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Pulse Eco Firmware	Version 1.16

Running on/with	Platform Versions
Sound4 Pulse Eco	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Impact Eco Firmware	Version 1.16

Running on/with	Platform Versions
Sound4 Impact Eco	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 First Firmware	Version 1.69

Running on/with	Platform Versions
Sound4 First	Version 1.0

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 First Firmware	Version 2.15

Running on/with	Platform Versions
Sound4 First	Version 2.0

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Pulse Firmware	Version 1.69

Running on/with	Platform Versions
Sound4 Pulse	Version 1.0

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Pulse Firmware	Version 2.15

Running on/with	Platform Versions
Sound4 Pulse	Version 2.0

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Impact Firmware	Version 1.69

Running on/with	Platform Versions
Sound4 Impact	Version 1.0

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sound4 Impact Firmware	Version 2.15

Running on/with	Platform Versions
Sound4 Impact	Version 2.0

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."