Description

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.

Related CPE's

Could not find any relations

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/247921

https://packetstormsecurity.com/files/170259/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Information-Disclosure.html

https://www.sound4.com/

https://www.vulncheck.com/advisories/sound-impactfirstpulseeco-x-information-disclosure-via-log-directory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5732.php

Weaknesses

[email protected]

Primary
CWE-548

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-30T23:15:45.390

2 hours ago

Last modified

2025-12-30T23:15:45.390

2 hours ago