Insufficient Session Expiration in SOUND4 Allows Session Hijacking

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: VulnCheck

Description

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-30

Generated

2026-07-06

AI Q&A

2025-12-31

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50692

EUVD

EUVD-2022-55943

Affected Vendors & Products

Vendor	Product	Version / Range
sound4	eco	2.*
sound4	impact	2.*
sound4	first	2.*
sound4	pulse	2.*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-613	According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Attack-Flow Graph

Executive Summary

This vulnerability exists in SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below, where there is insufficient session expiration. This weakness allows attackers to reuse old session credentials, exploiting weak session management to potentially hijack active user sessions and gain unauthorized access to the application.

Impact Analysis

The vulnerability can lead to unauthorized access to the application by attackers who hijack active user sessions through reuse of old session credentials. This compromises the security of user accounts and sensitive information within the application.

Hi! I’m here to help you understand CVE-2022-50692. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70