CVE-2022-50975 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Problem types: cwe_id: CWE-346
description: CWE-346 Origin Validation Error
Affected products: vendor: Innomic
product: VibroLine VLX1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: AvibiaLine AVLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: AvibiaLine AVLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: AvibiaLine AVLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: AvibiaLine AVLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: AvibiaLine AVLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 4.0
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2026-02-02T14:07:32.421Z