CVE-2022-50975
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
CVE-2022-50975 is a high vulnerability (CVSS 8.8) in Avibia Avibialine Avlx1 Hd 5.0, published February 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. No source names a fixed version.
- Severity
- 8.8 HighCVSS 3.1, CVE List
- Exploit chance
- 0.26%EPSS, 17th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- avibia avibialine avlx1 hd 5.0
- avibia avibialine avlx2 hd 5.0
- avibia avibialine avlx4 hd 5.0
- avibia avibialine avlx6 hd 5.0
- avibia avibialine avlx8 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx1 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx2 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx4 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx6 hd 5.0
- ids innomic schwingungsmesstechnik gmbh vibroline vlx8 hd 5.0
- innomic avibialine avle1 hd 5.0
- innomic avibialine avle2 hd 5.0
Show 23 moreShow less
- innomic avibialine avle4 hd 5.0
- innomic avibialine avle6 hd 5.0
- innomic avibialine avle8 hd 5.0
- innomic vibroline vle1 hd 4.0
- innomic vibroline vle1 hd 5.0
- innomic vibroline vle2 hd 4.0
- innomic vibroline vle2 hd 5.0
- innomic vibroline vle4 hd 4.0
- innomic vibroline vle4 hd 5.0
- innomic vibroline vle6 hd 4.0
- innomic vibroline vle6 hd 5.0
- innomic vibroline vle8 hd 4.0
- innomic vibroline vle8 hd 5.0
- innomic vibroline vlx1 hd 4.0
- innomic vibroline vlx1 hd 5.0
- innomic vibroline vlx2 hd 4.0
- innomic vibroline vlx2 hd 5.0
- innomic vibroline vlx4 hd 4.0
- innomic vibroline vlx4 hd 5.0
- innomic vibroline vlx6 hd 4.0
- innomic vibroline vlx6 hd 5.0
- innomic vibroline vlx8 hd 4.0
- innomic vibroline vlx8 hd 5.0
What each source reports
CVE List Score used
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
- Record
CVE-2022-50975- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-346
- Updated
- 2026-11-02
EUVDEUVD-2022-55952
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
- Record
EUVD-2022-55952- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vf6m-whr4-pfvq
An unauthenticated remote attacker is able to use an existing session id of a logged in user and...
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
- Record
GHSA-vf6m-whr4-pfvq- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-346
- Updated
- 2026-11-02
NVD
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
- Record
CVE-2022-50975- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-346
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.