CVE-2022-50981

Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements

State: Published
Severity: 9.8 Critical
Published: Feb 2, 2026
Updated: Feb 2, 2026
Reserved: Jan 12, 2026

Description

An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
VibroLine VLX1 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX2 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX4 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX6 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLX8 HD 5.0Innomic	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX1 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX2 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX4 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX6 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
AvibiaLine AVLX8 HD 5.0avibia	2.1.1340 through 2.1.1387Affected 2.1.1866Affected
VibroLine VLE1 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1340 through 2.1.1387Not affected
AvibiaLine AVLE1 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE2 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE4 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE6 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
AvibiaLine AVLE8 HD 5.0avibia	2.1.1340 through 2.1.1387Not affected 2.1.1866Not affected
VibroLine VLE1 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE2 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE4 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE6 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE8 HD 5.0Innomic	2.1.1866Not affected
VibroLine VLE1 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE2 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE4 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE6 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLE8 HD 4.0Innomic	1.4.1074 through 1.4.1116Not affected
VibroLine VLX1 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX2 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX4 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX6 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected
VibroLine VLX8 HD 4.0Innomic	1.5.1074 through 1.5.1116Not affected

References

https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.htmlvendor-advisory
https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.jsonvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.