CVE-2022-50794

The vulnerability is located in the 'username' parameter transmitted via HTTP POST method to the index.php and login.php scripts. The application does not properly sanitize user-supplied input data, which enables injection of arbitrary system shell commands. Since the vulnerability is available without authentication, an attacker can exploit it directly over the network without any prior login.

An attacker can execute arbitrary system commands with the privileges of the process handling the application, which may lead to complete device takeover, data leakage, and violation of system availability and integrity.

Apply patches available from the manufacturer according to the references. It is recommended to update device firmware to a version higher than 2.x and restrict network access to the SOUND4 device management interface exclusively to trusted hosts or networks (e.g., through firewall or network segmentation).

SOUND4 IMPACT, SOUND4 FIRST, SOUND4 PULSE, SOUND4 Pulse Eco — versions 2.x and lower