CVE-2022-50980 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN
A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Innomic
product: VibroLine VLX1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLX8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE1 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE2 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE4 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE6 HD 5.0
default_status: unaffected
vendor: avibia
product: AvibiaLine AVLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 5.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLE8 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX1 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX2 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX4 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX6 HD 4.0
default_status: unaffected
vendor: Innomic
product: VibroLine VLX8 HD 4.0
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2026-02-02T14:11:21.236Z