by Kastro
Paper/Archive/CVE-2022-50981

CVE-2022-50981

Innomic VibroLine VLX1 HD 5.0 — Multiple Innomic VibroLine VLX HD 5.0 and avibia AVLX weak password requirements

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.0.480 × 209.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.

Affected

ProductAffectedFixed inSource
VibroLine VLX1 HD 5.02.1.1340 – 2.1.1387–CNA
VibroLine VLX1 HD 5.02.1.1866–CNA
VibroLine VLX2 HD 5.02.1.1340 – 2.1.1387–CNA
VibroLine VLX2 HD 5.02.1.1866–CNA
VibroLine VLX4 HD 5.02.1.1340 – 2.1.1387–CNA
VibroLine VLX4 HD 5.02.1.1866–CNA
VibroLine VLX6 HD 5.02.1.1340 – 2.1.1387–CNA
VibroLine VLX6 HD 5.02.1.1866–CNA
VibroLine VLX8 HD 5.02.1.1340 – 2.1.1387–CNA
VibroLine VLX8 HD 5.02.1.1866–CNA
AvibiaLine AVLX1 HD 5.02.1.1340 – 2.1.1387–CNA
AvibiaLine AVLX1 HD 5.02.1.1866–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryinnomic.com/.well-known/csaf/white/2026/ids-2026-0001.htmladvisoryinnomic.com/.well-known/csaf/white/2026/ids-2026-0001.json