CVE-2022-50979
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
- Record
CVE-2022-50979- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2022-55956
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
- Record
EUVD-2022-55956- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hfc3-fpp4-rqvm
An unauthenticated adjacent attacker could potentially disrupt operations by switching between...
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
- Record
GHSA-hfc3-fpp4-rqvm- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
- Record
CVE-2022-50979- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- avibia avibialine avle1 hd 5.0
- avibia avibialine avle2 hd 5.0
- avibia avibialine avle4 hd 5.0
- avibia avibialine avle6 hd 5.0
- avibia avibialine avle8 hd 5.0
- avibia avibialine avlx1 hd 5.0
- avibia avibialine avlx2 hd 5.0
- avibia avibialine avlx4 hd 5.0
- avibia avibialine avlx6 hd 5.0
- avibia avibialine avlx8 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx1 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx2 hd 5.0
Show 23 moreShow less
- ids innomic schwingungsmesstechnik gmbh vibroline vlx4 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx6 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx8 hd 5.0
- innomic vibroline vle1 hd 4.0
- innomic vibroline vle1 hd 5.0
- innomic vibroline vle2 hd 4.0
- innomic vibroline vle2 hd 5.0
- innomic vibroline vle4 hd 4.0
- innomic vibroline vle4 hd 5.0
- innomic vibroline vle6 hd 4.0
- innomic vibroline vle6 hd 5.0
- innomic vibroline vle8 hd 4.0
- innomic vibroline vle8 hd 5.0
- innomic vibroline vlx1 hd 4.0
- innomic vibroline vlx1 hd 5.0
- innomic vibroline vlx2 hd 4.0
- innomic vibroline vlx2 hd 5.0
- innomic vibroline vlx4 hd 4.0
- innomic vibroline vlx4 hd 5.0
- innomic vibroline vlx6 hd 4.0
- innomic vibroline vlx6 hd 5.0
- innomic vibroline vlx8 hd 4.0
- innomic vibroline vlx8 hd 5.0
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-50979 is a medium vulnerability (CVSS 6.5) in Avibia Avibialine Avle1 Hd 5.0, published February 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.