CVE-2022-50981
Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
9.8
Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
- Record
CVE-2022-50981- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2022-55958
9.8
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
- Record
EUVD-2022-55958- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-47f4-2884-x6r8
9.8
An unauthenticated remote attacker can gain full access on the affected devices as they are...
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
- Record
GHSA-47f4-2884-x6r8- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
9.8
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
- Record
CVE-2022-50981- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- avibia avibialine avle1 hd 5.0
- avibia avibialine avle2 hd 5.0
- avibia avibialine avle4 hd 5.0
- avibia avibialine avle6 hd 5.0
- avibia avibialine avle8 hd 5.0
- avibia avibialine avlx1 hd 5.0
- avibia avibialine avlx2 hd 5.0
- avibia avibialine avlx4 hd 5.0
- avibia avibialine avlx6 hd 5.0
- avibia avibialine avlx8 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx1 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx2 hd 5.0
Show 23 moreShow less
- ids innomic schwingungsmesstechnik gmbh vibroline vlx4 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx6 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx8 hd 5.0
- innomic vibroline vle1 hd 4.0
- innomic vibroline vle1 hd 5.0
- innomic vibroline vle2 hd 4.0
- innomic vibroline vle2 hd 5.0
- innomic vibroline vle4 hd 4.0
- innomic vibroline vle4 hd 5.0
- innomic vibroline vle6 hd 4.0
- innomic vibroline vle6 hd 5.0
- innomic vibroline vle8 hd 4.0
- innomic vibroline vle8 hd 5.0
- innomic vibroline vlx1 hd 4.0
- innomic vibroline vlx1 hd 5.0
- innomic vibroline vlx2 hd 4.0
- innomic vibroline vlx2 hd 5.0
- innomic vibroline vlx4 hd 4.0
- innomic vibroline vlx4 hd 5.0
- innomic vibroline vlx6 hd 4.0
- innomic vibroline vlx6 hd 5.0
- innomic vibroline vlx8 hd 4.0
- innomic vibroline vlx8 hd 5.0
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-50981 is a critical vulnerability (CVSS 9.8) in Avibia Avibialine Avle1 Hd 5.0, published February 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. No source names a fixed version.