An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Metrics
Affected Vendors & Products
References
History
Wed, 04 Feb 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Avibia
Avibia avibialine Avlx1 Hd Avibia avibialine Avlx2 Hd Avibia avibialine Avlx4 Hd Avibia avibialine Avlx6 Hd Avibia avibialine Avlx8 Hd Innomic Innomic avibialine Avle1 Hd Innomic avibialine Avle2 Hd Innomic avibialine Avle4 Hd Innomic avibialine Avle6 Hd Innomic avibialine Avle8 Hd Innomic vibroline Vle1 Hd Innomic vibroline Vle2 Hd Innomic vibroline Vle4 Hd Innomic vibroline Vle6 Hd Innomic vibroline Vle8 Hd Innomic vibroline Vlx1 Hd Innomic vibroline Vlx2 Hd Innomic vibroline Vlx4 Hd Innomic vibroline Vlx6 Hd Innomic vibroline Vlx8 Hd |
|
| Vendors & Products |
Avibia
Avibia avibialine Avlx1 Hd Avibia avibialine Avlx2 Hd Avibia avibialine Avlx4 Hd Avibia avibialine Avlx6 Hd Avibia avibialine Avlx8 Hd Innomic Innomic avibialine Avle1 Hd Innomic avibialine Avle2 Hd Innomic avibialine Avle4 Hd Innomic avibialine Avle6 Hd Innomic avibialine Avle8 Hd Innomic vibroline Vle1 Hd Innomic vibroline Vle2 Hd Innomic vibroline Vle4 Hd Innomic vibroline Vle6 Hd Innomic vibroline Vle8 Hd Innomic vibroline Vlx1 Hd Innomic vibroline Vlx2 Hd Innomic vibroline Vlx4 Hd Innomic vibroline Vlx6 Hd Innomic vibroline Vlx8 Hd |
Mon, 02 Feb 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 02 Feb 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled. | |
| Title | Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration | |
| Weaknesses | CWE-346 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-02-02T17:26:33.533Z
Reserved: 2026-01-12T08:05:55.994Z
Link: CVE-2022-50975
Updated: 2026-02-02T17:26:27.799Z
Status : Awaiting Analysis
Published: 2026-02-02T15:16:27.933
Modified: 2026-02-03T16:44:36.630
Link: CVE-2022-50975
No data.