CVE-2022-50975

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

State: Published
Severity: 8.8 High
Published: Feb 2, 2026
Updated: Feb 2, 2026
Reserved: Jan 12, 2026

Description

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-346 Origin Validation Error

Affected Products

Product	Versions
VibroLine VLX1 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
VibroLine VLX2 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
VibroLine VLX4 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
VibroLine VLX6 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
VibroLine VLX8 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
AvibiaLine AVLX1 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
AvibiaLine AVLX2 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
AvibiaLine AVLX4 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
AvibiaLine AVLX6 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
AvibiaLine AVLX8 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Not affected
VibroLine VLE1 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE1 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE2 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE4 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE6 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE8 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE1 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE1 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE2 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE4 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE6 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE8 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLX1 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX2 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX4 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX6 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX8 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected

References

https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.htmlvendor-advisory
https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.jsonvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.