CVE-2022-50978 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Innomic
product: VibroLine VLX1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 4.0
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2026-02-02T14:09:43.563Z