CVE-2022-50975 HIGH

CVE-2022-50975: Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

Vendor Innomic

Product VibroLine VLX1 HD 5.0

Weakness CWE-346 · Origin validation

Published February 2, 2026

Last update February 2, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.

Key dates

02Disclosure timeline

February 2, 2026 CVE published

February 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-50975 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/346.html

Identifiers

CVE CVE-2022-50975

CWE CWE-346

CVSS 8.8 / HIGH