CVE-2022-50977

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP

Published Feb 2, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Avibia
Avibia avibialine Avle1 Hd
Avibia avibialine Avle2 Hd
Avibia avibialine Avle4 Hd
Avibia avibialine Avle6 Hd
Avibia avibialine Avle8 Hd
Avibia avibialine Avlx1 Hd
Avibia avibialine Avlx2 Hd
Avibia avibialine Avlx4 Hd
Avibia avibialine Avlx6 Hd
Avibia avibialine Avlx8 Hd
Innomic
Innomic vibroline Vle1 Hd
Innomic vibroline Vle2 Hd
Innomic vibroline Vle4 Hd
Innomic vibroline Vle6 Hd
Innomic vibroline Vle8 Hd
Innomic vibroline Vlx1 Hd
Innomic vibroline Vlx2 Hd
Innomic vibroline Vlx4 Hd
Innomic vibroline Vlx6 Hd
Innomic vibroline Vlx8 Hd
Vendors & Products Avibia
Avibia avibialine Avle1 Hd
Avibia avibialine Avle2 Hd
Avibia avibialine Avle4 Hd
Avibia avibialine Avle6 Hd
Avibia avibialine Avle8 Hd
Avibia avibialine Avlx1 Hd
Avibia avibialine Avlx2 Hd
Avibia avibialine Avlx4 Hd
Avibia avibialine Avlx6 Hd
Avibia avibialine Avlx8 Hd
Innomic
Innomic vibroline Vle1 Hd
Innomic vibroline Vle2 Hd
Innomic vibroline Vle4 Hd
Innomic vibroline Vle6 Hd
Innomic vibroline Vle8 Hd
Innomic vibroline Vlx1 Hd
Innomic vibroline Vlx2 Hd
Innomic vibroline Vlx4 Hd
Innomic vibroline Vlx6 Hd
Innomic vibroline Vlx8 Hd
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
Title Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}