CVE-2022-50978
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
- Record
CVE-2022-50978- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2022-55955
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
- Record
EUVD-2022-55955- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vcc2-8qcw-j2m8
An unauthenticated remote attacker could potentially disrupt operations by switching between...
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
- Record
GHSA-vcc2-8qcw-j2m8- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
- Record
CVE-2022-50978- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- avibia avibialine avle1 hd 5.0
- avibia avibialine avle2 hd 5.0
- avibia avibialine avle4 hd 5.0
- avibia avibialine avle6 hd 5.0
- avibia avibialine avle8 hd 5.0
- avibia avibialine avlx1 hd 5.0
- avibia avibialine avlx2 hd 5.0
- avibia avibialine avlx4 hd 5.0
- avibia avibialine avlx6 hd 5.0
- avibia avibialine avlx8 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx1 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx2 hd 5.0
Show 23 moreShow less
- ids innomic schwingungsmesstechnik gmbh vibroline vlx4 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx6 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx8 hd 5.0
- innomic vibroline vle1 hd 4.0
- innomic vibroline vle1 hd 5.0
- innomic vibroline vle2 hd 4.0
- innomic vibroline vle2 hd 5.0
- innomic vibroline vle4 hd 4.0
- innomic vibroline vle4 hd 5.0
- innomic vibroline vle6 hd 4.0
- innomic vibroline vle6 hd 5.0
- innomic vibroline vle8 hd 4.0
- innomic vibroline vle8 hd 5.0
- innomic vibroline vlx1 hd 4.0
- innomic vibroline vlx1 hd 5.0
- innomic vibroline vlx2 hd 4.0
- innomic vibroline vlx2 hd 5.0
- innomic vibroline vlx4 hd 4.0
- innomic vibroline vlx4 hd 5.0
- innomic vibroline vlx6 hd 4.0
- innomic vibroline vlx6 hd 5.0
- innomic vibroline vlx8 hd 4.0
- innomic vibroline vlx8 hd 5.0
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-50978 is a high vulnerability (CVSS 7.5) in Avibia Avibialine Avle1 Hd 5.0, published February 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. No source names a fixed version.