Approved changes feed: RSS · Atom

cpe:2.3:a:innomic:vibroline_vlx2_hd_5.0:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInnomic (9b703a2d-cb84-573d-a9ff-be895825e7f5)
ProductVibroline Vlx2 Hd 5.0 (fdd63cec-894a-5309-9575-196f147d74e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50981 vulnerable 2026-06-03 14:48:45.239970 Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
CRITICAL (9.8)
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
Published: 2026-02-02T14:12:05.100Z
Updated: 2026-02-02T17:22:10.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50980 vulnerable 2026-06-03 14:48:45.238870 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN
MEDIUM (6.5)
A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
Published: 2026-02-02T14:11:21.236Z
Updated: 2026-02-02T17:23:17.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50979 vulnerable 2026-06-03 14:48:45.237764 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
MEDIUM (6.5)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
Published: 2026-02-02T14:10:40.182Z
Updated: 2026-02-02T17:23:54.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50978 vulnerable 2026-06-03 14:48:45.236562 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
HIGH (7.5)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
Published: 2026-02-02T14:09:43.563Z
Updated: 2026-02-02T17:24:43.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50977 vulnerable 2026-06-03 14:48:45.229234 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP
HIGH (7.5)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
Published: 2026-02-02T14:08:59.192Z
Updated: 2026-02-02T17:25:19.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50975 vulnerable 2026-06-03 14:48:45.199410 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
HIGH (8.8)
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Published: 2026-02-02T14:07:32.421Z
Updated: 2026-02-02T17:26:33.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.