CVE-2022-50980

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN

State: Published
Severity: 6.5 Medium
Published: Feb 2, 2026
Updated: Feb 2, 2026
Reserved: Jan 12, 2026

Description

A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CERTVDE

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
VibroLine VLX1 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX2 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX4 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX6 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX8 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX1 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX2 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX4 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX6 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX8 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLE1 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE1 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE2 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE4 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE6 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE8 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
VibroLine VLE1 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE1 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE2 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE4 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE6 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE8 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLX1 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX2 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX4 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX6 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX8 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected

References

https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.htmlvendor-advisory
https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.jsonvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.