CVE-2022-50981 Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Innomic
product: VibroLine VLX1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 4.0
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-02-02T14:12:05.100Z