Vulnerability · Published Dec 30, 2025 · Assigned by VulnCheck

CVE-2022-50789SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php

High 7.8

In plain English

A high-severity OS command injection in WM2 from Kantar Media. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.2% (higher than 91% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)4.2%top 9.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory with .dns.pid extension. Unauthenticated attackers can execute the malicious commands by making a single HTTP POST request to the vulnerable dns.php script, which triggers command execution and then deletes the file.

Affected products (as reported)

Vendor	Product	Versions
SOUND4 Ltd.	Impact/Pulse/First	Version 2: 1.1/2.15
SOUND4 Ltd.	Impact/Pulse Eco	1.16
SOUND4 Ltd.	BigVoice4	1.2
SOUND4 Ltd.	BigVoice2	1.30
SOUND4 Ltd.	Stream	1.1/2.4.29
Kantar Media	WM2	1.11

Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Zero Science Lab Disclosure (ZSL-2022-5733) third-party-advisory
Packet Storm Security Exploit Details exploit
IBM X-Force Vulnerability Exchange Entry vdb-entry
SOUND4 Product Homepage product
VulnCheck Advisory: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via dns.php third-party-advisory