Innomic vulnerabilities
Published CVEs affecting Innomic products: 7 record(s), with severity, exploitation and fixes.
VibroLine VLX1 HD 5.0 6VibroLine VLX2 HD 5.0 6VibroLine VLX4 HD 5.0 6VibroLine VLX6 HD 5.0 6VibroLine VLX8 HD 5.0 6VibroLine Configurator 5.0 1
CVE-2022-50981
Critical · 9.8
CWE-306 Feb 2, 2026
Missing Authentication (CWE-306) in Devices Shipped Without Default Password
An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
CVE-2022-50980
Medium · 6.5
CWE-306 Feb 2, 2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN
A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
CVE-2022-50979
Medium · 6.5
CWE-306 Feb 2, 2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
CVE-2022-50978
High · 7.5
CWE-306 Feb 2, 2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
CVE-2022-50977
High · 7.5
CWE-306 Feb 2, 2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
CVE-2022-50976
High · 7.7
CWE-1288 Feb 2, 2026
Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.
CVE-2022-50975
High · 8.8
CWE-346 Feb 2, 2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.