CVE-2022-50975— Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-50975
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
源验证错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Innomic VibroLine Series 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Innomic VibroLine Series是德国Innomic公司的一个专业振动测量与分析系统。 Innomic VibroLine Series存在访问控制错误漏洞，该漏洞源于未经验证的远程攻击者能够使用已登录用户的现有会话ID，并在启用以太网配置的情况下获得设备的完全访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-50975
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-50975
请登录查看更多情报信息。
Same Patch Batch · Innomic · 2026-02-02 · 7 CVEs total
| CVE-2022-50981 | 9.8 CRITICAL | Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements |
| CVE-2022-50976 | 7.7 HIGH | Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via U |
| CVE-2022-50977 | 7.5 HIGH | Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset |
| CVE-2022-50978 | 7.5 HIGH | Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset |
| CVE-2022-50980 | 6.5 MEDIUM | Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset |
| CVE-2022-50979 | 6.5 MEDIUM | Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset |
IV. Related Vulnerabilities
Same product: VibroLine VLX1 HD 5.0
- CVE-2022-50981
Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak p - CVE-2022-50980
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50979
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50978
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50977
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe
Same vendor: Innomic
- CVE-2022-50981
Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak p - CVE-2022-50980
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50979
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50978
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe - CVE-2022-50977
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthe
Same weakness: CWE-346
- CVE-2026-42559
RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP se - CVE-2026-44184
Cleanuparr: Reflective CORS combined with trusted-network au - CVE-2026-6508
RCE in TUBITAK BILGEM's Liderahenk - CVE-2026-43870
Apache Thrift: Node.js web_server.js multi-vulnerability - CVE-2026-7439
AgentFlow Local Web API Content-Type Validation Bypass
V. Comments for CVE-2022-50975
No comments yet