Approved changes feed: RSS · Atom

cpe:2.3:a:innomic:vibroline_vlx8_hd_4.0:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInnomic (9b703a2d-cb84-573d-a9ff-be895825e7f5)
ProductVibroline Vlx8 Hd 4.0 (570ce52b-5266-51bb-8f90-f0400f9fcd40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50981 not_vulnerable 2026-06-03 14:48:45.240537 Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
CRITICAL (9.8)
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
Published: 2026-02-02T14:12:05.100Z
Updated: 2026-02-02T17:22:10.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50980 not_vulnerable 2026-06-03 14:48:45.239362 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN
MEDIUM (6.5)
A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
Published: 2026-02-02T14:11:21.236Z
Updated: 2026-02-02T17:23:17.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50979 not_vulnerable 2026-06-03 14:48:45.238277 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
MEDIUM (6.5)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
Published: 2026-02-02T14:10:40.182Z
Updated: 2026-02-02T17:23:54.319Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50978 not_vulnerable 2026-06-03 14:48:45.237084 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
HIGH (7.5)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
Published: 2026-02-02T14:09:43.563Z
Updated: 2026-02-02T17:24:43.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50977 not_vulnerable 2026-06-03 14:48:45.235870 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP
HIGH (7.5)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
Published: 2026-02-02T14:08:59.192Z
Updated: 2026-02-02T17:25:19.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50975 not_vulnerable 2026-06-03 14:48:45.224943 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
HIGH (8.8)
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Published: 2026-02-02T14:07:32.421Z
Updated: 2026-02-02T17:26:33.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.