Description
SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a conditional command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory. Unauthenticated attackers can execute commands by making a single HTTP POST request to the vulnerable ping.php script, which triggers the malicious file and then deletes it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SOUND4 | Impact/Pulse/First | Version 2: 1.1/2.15 | — |
| SOUND4 | Impact/Pulse Eco | 1.16 | — |
| SOUND4 | BigVoice4 | 1.2 | — |
| SOUND4 | BigVoice2 | 1.30 | — |
| SOUND4 | Stream | 1.1/2.4.29 | — |
| Kantar Media | WM2 | 1.11 | — |
References
- Zero Science Lab Disclosure (ZSL-2022-5735) third-party-advisory
- Packet Storm Security Exploit Details exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry
- SOUND4 Product Homepage product
- VulnCheck Advisory: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.php third-party-advisory