Security readout for executives and security teams
Plain-English summary
This flaw lets a logged-in attacker make affected SOUND4-family web interfaces run operating system commands. The attacker needs valid access, but successful exploitation could compromise confidentiality, integrity, and availability of broadcast or streaming systems. Public exploit information is referenced, but the provided sources do not show confirmed active exploitation.
Executive priority
Treat as high priority for internet-reachable or broadly accessible management interfaces. Authenticated access reduces likelihood, but impact is severe if credentials are compromised. Prioritize inventory, access restriction, and vendor-confirmed remediation.
Technical view
CVE-2022-50793 is an authenticated command injection in www-data-handler.php via the services POST parameter. It is categorized as CWE-78 with CVSS 3.1 score 8.8. The CVSS vector indicates network access, low complexity, low privileges required, no user interaction, unchanged scope, and high impact to confidentiality, integrity, and availability.
Likely exposure
Exposure is most likely where affected SOUND4, BigVoice, Stream, or Kantar WM2 web management interfaces are reachable by users or networks beyond a tightly controlled administration segment.
Exploitation context
Sources describe authenticated command injection and include public exploit details. The vulnerability requires valid credentials or an equivalent authenticated session. CISA KEV status is not indicated, and the provided sources do not substantiate active exploitation in the wild.
Researcher notes
Evidence names additional affected products beyond the title, including BigVoice4, BigVoice2, Stream, and Kantar WM2. Patch information is not provided in the source bundle. Avoid assuming fixed versions unless confirmed by vendor guidance.
Mitigation direction
- Check SOUND4 or relevant vendor guidance for fixed versions or official workarounds.
- Restrict management interfaces to trusted administration networks or VPN access only.
- Review and limit user accounts with access to affected web interfaces.
- Monitor affected systems for unusual web requests and unexpected process activity.
- Prioritize isolation if vendor fixes are unavailable or unclear.
Validation and detection
- Inventory SOUND4 Impact, Pulse, First, Eco, BigVoice, Stream, and Kantar WM2 deployments.
- Compare installed versions against affected versions listed in the CVE source bundle.
- Confirm whether www-data-handler.php is present and exposed through the management interface.
- Review authentication logs for suspicious access to management functions.
- Check vendor advisories for patch status before closing remediation.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-78: Command execution behavior lookup
Command injection weaknesses can lead defenders to review execution techniques and command interpreter telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2022-50793 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H2.85.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
8.8HighVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- Zero Science Lab Disclosure (ZSL-2022-5737)CVE reference · third-party-advisory
- Packet Storm Security Exploit DetailsCVE reference · exploit
- IBM X-Force Vulnerability Exchange EntryCVE reference · vdb-entry
- SOUND4 Product HomepageCVE reference · product
- VulnCheck Advisory: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.phpCVE reference · third-party-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.