Description
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parameter in upload.cgi. Attackers can exploit the vulnerability by sending crafted multipart form-data POST requests with directory traversal sequences to write files to unintended system locations.
Affected products
sound4: impact firmware; sound4: impact; sound4: pulse firmware; sound4: pulse; sound4: first firmware; sound4: first; sound4: stream extension; sound4: wm2 firmware; sound4: wm2; sound4: big voice2 firmware; sound4: big voice2; sound4: big voice4 firmware; sound4: big voice4; sound4: pulse eco firmware; sound4: pulse eco
References5
- www.exploit-db.com/exploits/51172 ExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5730.php ExploitThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5730.php ExploitThird Party Advisory
- web.archive.org/web/20221207074555/www.sound4.com/ Product
- www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-unauth… Third Party Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 4.0
-
8.8
HIGH
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 1% percentile: 69 · as of 11 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.