CVE-2022-50975

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

Published Feb 2, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Avibia
Avibia avibialine Avlx1 Hd
Avibia avibialine Avlx2 Hd
Avibia avibialine Avlx4 Hd
Avibia avibialine Avlx6 Hd
Avibia avibialine Avlx8 Hd
Innomic
Innomic avibialine Avle1 Hd
Innomic avibialine Avle2 Hd
Innomic avibialine Avle4 Hd
Innomic avibialine Avle6 Hd
Innomic avibialine Avle8 Hd
Innomic vibroline Vle1 Hd
Innomic vibroline Vle2 Hd
Innomic vibroline Vle4 Hd
Innomic vibroline Vle6 Hd
Innomic vibroline Vle8 Hd
Innomic vibroline Vlx1 Hd
Innomic vibroline Vlx2 Hd
Innomic vibroline Vlx4 Hd
Innomic vibroline Vlx6 Hd
Innomic vibroline Vlx8 Hd
Vendors & Products Avibia
Avibia avibialine Avlx1 Hd
Avibia avibialine Avlx2 Hd
Avibia avibialine Avlx4 Hd
Avibia avibialine Avlx6 Hd
Avibia avibialine Avlx8 Hd
Innomic
Innomic avibialine Avle1 Hd
Innomic avibialine Avle2 Hd
Innomic avibialine Avle4 Hd
Innomic avibialine Avle6 Hd
Innomic avibialine Avle8 Hd
Innomic vibroline Vle1 Hd
Innomic vibroline Vle2 Hd
Innomic vibroline Vle4 Hd
Innomic vibroline Vle6 Hd
Innomic vibroline Vle8 Hd
Innomic vibroline Vlx1 Hd
Innomic vibroline Vlx2 Hd
Innomic vibroline Vlx4 Hd
Innomic vibroline Vlx6 Hd
Innomic vibroline Vlx8 Hd
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Title Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
Weaknesses CWE-346
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}