Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-50975

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

Description

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Innomic VibroLine VLX1 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

Innomic VibroLine VLX2 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

Innomic VibroLine VLX4 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

Innomic VibroLine VLX6 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

Innomic VibroLine VLX8 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

avibia AvibiaLine AVLX1 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

avibia AvibiaLine AVLX2 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

avibia AvibiaLine AVLX4 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

avibia AvibiaLine AVLX6 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

avibia AvibiaLine AVLX8 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387affected
  • 2.1.1866unaffected

Innomic VibroLine VLE1 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic VibroLine VLE2 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic VibroLine VLE4 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic VibroLine VLE6 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic VibroLine VLE8 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic AvibiaLine AVLE1 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic AvibiaLine AVLE2 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic AvibiaLine AVLE4 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic AvibiaLine AVLE6 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic AvibiaLine AVLE8 HD 5.0

Default version status: unaffected

  • 2.1.1340 to ≤ 2.1.1387unaffected

Innomic VibroLine VLE1 HD 5.0

Default version status: unaffected

  • 2.1.1866unaffected

Innomic VibroLine VLE2 HD 5.0

Default version status: unaffected

  • 2.1.1866unaffected

Innomic VibroLine VLE4 HD 5.0

Default version status: unaffected

  • 2.1.1866unaffected

Innomic VibroLine VLE6 HD 5.0

Default version status: unaffected

  • 2.1.1866unaffected

Innomic VibroLine VLE8 HD 5.0

Default version status: unaffected

  • 2.1.1866unaffected

Innomic VibroLine VLE1 HD 4.0

Default version status: unaffected

  • 1.4.1074 to ≤ 1.4.1116unaffected

Innomic VibroLine VLE2 HD 4.0

Default version status: unaffected

  • 1.4.1074 to ≤ 1.4.1116unaffected

Innomic VibroLine VLE4 HD 4.0

Default version status: unaffected

  • 1.4.1074 to ≤ 1.4.1116unaffected

Innomic VibroLine VLE6 HD 4.0

Default version status: unaffected

  • 1.4.1074 to ≤ 1.4.1116unaffected

Innomic VibroLine VLE8 HD 4.0

Default version status: unaffected

  • 1.4.1074 to ≤ 1.4.1116unaffected

Innomic VibroLine VLX1 HD 4.0

Default version status: unaffected

  • 1.5.1074 to ≤ 1.5.1116unaffected

Innomic VibroLine VLX2 HD 4.0

Default version status: unaffected

  • 1.5.1074 to ≤ 1.5.1116unaffected

Innomic VibroLine VLX4 HD 4.0

Default version status: unaffected

  • 1.5.1074 to ≤ 1.5.1116unaffected

Innomic VibroLine VLX6 HD 4.0

Default version status: unaffected

  • 1.5.1074 to ≤ 1.5.1116unaffected

Innomic VibroLine VLX8 HD 4.0

Default version status: unaffected

  • 1.5.1074 to ≤ 1.5.1116unaffected

References