Vulnerabilidades de Innomic
CVEs publicadas que afetam produtos de Innomic: 7 registro(s), com severidade, exploração e correções.
VibroLine VLX1 HD 5.0 6VibroLine VLX2 HD 5.0 6VibroLine VLX4 HD 5.0 6VibroLine VLX6 HD 5.0 6VibroLine VLX8 HD 5.0 6VibroLine Configurator 5.0 1
CVE-2022-50981
Crítica · 9.8
CWE-306 02/02/2026
Falta de Autenticação (CWE-306) em Dispositivos Entregues Sem Senha Padrão
Um atacante remoto não autenticado pode obter acesso total aos dispositivos afetados, pois eles são entregues sem senha por padrão e a definição de uma senha não é imposta.
CVE-2022-50980
Média · 6.5
CWE-306 02/02/2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via CAN
A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
CVE-2022-50979
Média · 6.5
CWE-306 02/02/2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (RS485)
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).
CVE-2022-50978
Alta · 7.5
CWE-306 02/02/2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
CVE-2022-50977
Alta · 7.5
CWE-306 02/02/2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via HTTP
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
CVE-2022-50976
Alta · 7.7
CWE-1288 02/02/2026
Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.
CVE-2022-50975
Alta · 8.8
CWE-346 02/02/2026
Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.