CVE-2022-50695

🗓️ 30 Dec 2025 22:41:34Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

CVE-2022-50695 permits unauthenticated ICMP flood via ping and traceroute scripts in IMPACT 2.x.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-50695	31 Dec 202521:02	–	circl
CNNVD	SOUND4多款产品安全漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2022-50695 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands	30 Dec 202522:41	–	cvelist
EUVD	EUVD-2022-55941	31 Dec 202500:31	–	euvd
NVD	CVE-2022-50695	30 Dec 202523:15	–	nvd
OSV	CVE-2022-50695	30 Dec 202523:15	–	osv
Positive Technologies	PT-2025-54233	30 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2022-50695 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x ICMP Flood Attack via Network Commands	30 Dec 202522:41	–	vulnrichment
Zero Science Lab	SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (ping/traceroute) ICMP Flood Attack	14 Dec 202200:00	–	zeroscience

NVD

Vulners

Node

AND

sound4 impact_firmwareMatch2.15

sound4 impactMatch2.0

Node

AND

sound4 impact_firmwareMatch1.69

sound4 impactMatch1.0

Node

AND

sound4 pulse_firmwareMatch2.15

sound4 pulseMatch2.0

Node

AND

sound4 pulse_firmwareMatch1.69

sound4 pulseMatch1.0

Node

AND

sound4 first_firmwareMatch2.15

sound4 firstMatch2.0

Node

AND

sound4 first_firmwareMatch1.69

sound4 firstMatch1.0

Node

AND

sound4 impact_eco_firmwareMatch1.16

sound4 impact_ecoMatch-

Node

sound4 stream_extensionMatch2.4.29

Node

AND

sound4 wm2_firmwareMatch1.11

sound4 wm2Match-

Node

AND

sound4 big_voice2_firmwareMatch1.30

sound4 big_voice2Match-

Node

AND

sound4 big_voice4_firmwareMatch1.2

sound4 big_voice4Match-

Node

AND

sound4 pulse_eco_firmwareMatch1.16

sound4 pulse_ecoMatch-

[
  {
    "vendor": "SOUND4 Ltd.",
    "product": "Impact/Pulse/First",
    "versions": [
      {
        "version": "Version 2: 1.1/2.15",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "SOUND4 Ltd.",
    "product": "Impact/Pulse Eco",
    "versions": [
      {
        "version": "1.16",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "SOUND4 Ltd.",
    "product": "BigVoice4",
    "versions": [
      {
        "version": "1.2",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "SOUND4 Ltd.",
    "product": "BigVoice2",
    "versions": [
      {
        "version": "1.30",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "SOUND4 Ltd.",
    "product": "Stream",
    "versions": [
      {
        "version": "1.1/2.4.29",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Kantar Media",
    "product": "WM2",
    "versions": [
      {
        "version": "1.11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5728.php
vulncheck	www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-icmp-flood-attack-via-network-commands
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/247948
sound4	www.sound4.com/
packetstormsecurity	www.packetstormsecurity.com/files/170255/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-ICMP-Flood-Attack.html

Parameter	Position	Path	Description	CWE
ping_host	request body	/ping.php	Unauthenticated attacker can trigger ICMP flood via ping.php.	CWE-770
networkid	request body	/ping.php	Unauthenticated attacker can trigger ICMP flood via ping.php.	CWE-770
traceroute_host	request body	/traceroute.php	Unauthenticated attacker can trigger ICMP flood via traceroute.php.	CWE-770
networkid	request body	/traceroute.php	Unauthenticated attacker can trigger ICMP flood via traceroute.php.	CWE-770
dns_host	request body	/dns.php	Unauthenticated attacker can trigger ICMP flood via dns.php.	CWE-770
networkid	request body	/dns.php	Unauthenticated attacker can trigger ICMP flood via dns.php.	CWE-770

17 Jun 2026 05:24Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

CVSS 48.7

EPSS0.00753

SSVC

CWE-770