CVE-2022-50975
High
Description
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
SeverityHigh
CVSS8.8
Exploit probability—
ProductVibroLine VLX1 HD 5.0
PublishedFeb 2, 2026
First seenFeb 2, 2026
Weakness typeCWE-346CWE-346
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Innomic VibroLine VLX1 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| Innomic VibroLine VLX2 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| Innomic VibroLine VLX4 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| Innomic VibroLine VLX6 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| Innomic VibroLine VLX8 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| avibia AvibiaLine AVLX1 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| avibia AvibiaLine AVLX2 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| avibia AvibiaLine AVLX4 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| avibia AvibiaLine AVLX6 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
| avibia AvibiaLine AVLX8 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.