Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-50976 (GCVE-0-2022-50976)
Vulnerability from cvelistv5 – Published: 2026-02-02 14:08 – Updated: 2026-02-02 17:25
VLAI
EPSS
Title
Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB
Summary
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.
Severity
7.7 (High)
CWE
- CWE-1288 - Improper Validation of Consistency within Input
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.innomic.com/.well-known/csaf/white/20… | vendor-advisory |
| https://www.innomic.com/.well-known/csaf/white/20… | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Innomic | VibroLine Configurator 5.0 |
Affected:
5.0.2416 , ≤ 5.0.2486
(semver)
Unaffected: 5.1.2730 |
|
| avibia | AvibiaLine Configurator 5.0 |
Affected:
5.0.2416 , ≤ 5.0.2486
(semver)
Unaffected: 5.1.2730 |
|
| Innomic | VibroLine Configurator 4.0 |
Unaffected:
4.0.1931 , ≤ 4.0.2406
(semver)
|
Date Public
2026-02-02 14:08
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-50976",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-02T17:25:42.635940Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-02T17:25:50.864Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "VibroLine Configurator 5.0",
"vendor": "Innomic",
"versions": [
{
"lessThanOrEqual": "5.0.2486",
"status": "affected",
"version": "5.0.2416",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.2730"
}
]
},
{
"defaultStatus": "unaffected",
"product": "AvibiaLine Configurator 5.0",
"vendor": "avibia",
"versions": [
{
"lessThanOrEqual": "5.0.2486",
"status": "affected",
"version": "5.0.2416",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.1.2730"
}
]
},
{
"defaultStatus": "unaffected",
"product": "VibroLine Configurator 4.0",
"vendor": "Innomic",
"versions": [
{
"lessThanOrEqual": "4.0.2406",
"status": "unaffected",
"version": "4.0.1931",
"versionType": "semver"
}
]
}
],
"datePublic": "2026-02-02T14:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1288",
"description": "CWE-1288: Improper Validation of Consistency within Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-02T14:08:24.139Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json"
}
],
"source": {
"advisory": "CERT@VDE#641933",
"discovery": "UNKNOWN"
},
"title": "Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2022-50976",
"datePublished": "2026-02-02T14:08:24.139Z",
"dateReserved": "2026-01-12T08:05:55.994Z",
"dateUpdated": "2026-02-02T17:25:50.864Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-50976",
"date": "2026-05-26",
"epss": "9e-05",
"percentile": "0.01033"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-50976\",\"sourceIdentifier\":\"info@cert.vde.com\",\"published\":\"2026-02-02T15:16:28.413\",\"lastModified\":\"2026-02-03T16:44:36.630\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.5,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1288\"}]}],\"references\":[{\"url\":\"https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html\",\"source\":\"info@cert.vde.com\"},{\"url\":\"https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json\",\"source\":\"info@cert.vde.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-50976\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-02-02T17:25:42.635940Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-02-02T17:25:47.547Z\"}}], \"cna\": {\"title\": \"Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB\", \"source\": {\"advisory\": \"CERT@VDE#641933\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.7, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Innomic\", \"product\": \"VibroLine Configurator 5.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.0.2416\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.0.2486\"}, {\"status\": \"unaffected\", \"version\": \"5.1.2730\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"avibia\", \"product\": \"AvibiaLine Configurator 5.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.0.2416\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.0.2486\"}, {\"status\": \"unaffected\", \"version\": \"5.1.2730\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Innomic\", \"product\": \"VibroLine Configurator 4.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.0.1931\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.0.2406\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-02-02T14:08:00.000Z\", \"references\": [{\"url\": \"https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1288\", \"description\": \"CWE-1288: Improper Validation of Consistency within Input\"}]}], \"providerMetadata\": {\"orgId\": \"270ccfa6-a436-4e77-922e-914ec3a9685c\", \"shortName\": \"CERTVDE\", \"dateUpdated\": \"2026-02-02T14:08:24.139Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2022-50976\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-02-02T17:25:50.864Z\", \"dateReserved\": \"2026-01-12T08:05:55.994Z\", \"assignerOrgId\": \"270ccfa6-a436-4e77-922e-914ec3a9685c\", \"datePublished\": \"2026-02-02T14:08:24.139Z\", \"assignerShortName\": \"CERTVDE\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
BSI-2026-0001
Vulnerability from csaf_certbund - Published: 2026-02-02 13:00 - Updated: 2026-02-02 13:00Summary
Unauthorized access affects VibroLine and AvibiaLine devices
Severity
High
Notes
Legal disclaimer: As a content provider, BSI is responsible under general law for its own content distributed for use. However, it remains your responsibility to carefully check usage and/or implementation of information provided with the content.
Summary: An attacker can exploit multiple vulnerabilities in VibroLine and AvibiaLine devices to gain unauthorized access or execute a denial of service attack.
Product description: The VibroLine and AvibiaLine devices are a condition monitoring solution for industrial applications
CWE-346
- Origin Validation Error
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0057 | — | ||
| Unresolved product id: CSAFPID-0058 | — | ||
| Unresolved product id: CSAFPID-0059 | — | ||
| Unresolved product id: CSAFPID-0060 | — | ||
| Unresolved product id: CSAFPID-0061 | — | ||
| Unresolved product id: CSAFPID-0068 | — | ||
| Unresolved product id: CSAFPID-0069 | — | ||
| Unresolved product id: CSAFPID-0071 | — |
Known affected
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0037 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0038 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0039 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0040 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0041 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0048 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0049 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CSAFPID-0051 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0132 | — | ||
| Unresolved product id: CSAFPID-0133 | — | ||
| Unresolved product id: CSAFPID-0134 | — | ||
| Unresolved product id: CSAFPID-0135 | — | ||
| Unresolved product id: CSAFPID-0136 | — | ||
| Unresolved product id: CSAFPID-0137 | — | ||
| Unresolved product id: CSAFPID-0138 | — | ||
| Unresolved product id: CSAFPID-0139 | — | ||
| Unresolved product id: CSAFPID-0140 | — | ||
| Unresolved product id: CSAFPID-0141 | — |
CWE-1288
- Improper Validation of Consistency within Input
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
VibroLine Configurator 5.1.2730
IDS Innomic Schwingungsmesstechnik GmbH / VibroLine 5.0 / VibroLine 5.0 Configurator
|
5.1.2732 | ||
|
AvibiaLine Configurator 5.1.2730
avibia GmbH / AvibiaLine / AvibiaLine Configurator
|
5.1.2732 |
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
VibroLine Configurator 5.0.2416 - 5.0.2486
IDS Innomic Schwingungsmesstechnik GmbH / VibroLine 5.0 / VibroLine 5.0 Configurator
|
vers:intdot/>=5.0.2416|<=5.1.2547 |
Vendor Fix
fix
|
|
|
AvibiaLine Configurator 5.0.2416 - 5.0.2486
avibia GmbH / AvibiaLine / AvibiaLine Configurator
|
vers:intdot/>=5.0.2416|<=5.0.2486 |
Vendor Fix
fix
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
VibroLine Configurator 4.0.1931 - 4.0.2406
IDS Innomic Schwingungsmesstechnik GmbH / VibroLine 4.0 / VibroLine 4.0 Configurator
|
vers:intdot/>=4.0.1931|<=4.0.2406 |
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0037 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0038 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0039 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0040 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0041 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0048 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0049 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0051 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0057 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0058 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0059 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0060 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0061 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0068 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0069 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0071 | — |
No Fix Planned
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0132 | — | ||
| Unresolved product id: CSAFPID-0133 | — | ||
| Unresolved product id: CSAFPID-0134 | — | ||
| Unresolved product id: CSAFPID-0135 | — | ||
| Unresolved product id: CSAFPID-0136 | — | ||
| Unresolved product id: CSAFPID-0137 | — | ||
| Unresolved product id: CSAFPID-0138 | — | ||
| Unresolved product id: CSAFPID-0139 | — | ||
| Unresolved product id: CSAFPID-0140 | — | ||
| Unresolved product id: CSAFPID-0141 | — |
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0037 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0038 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0039 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0040 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0041 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0048 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0049 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0051 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0057 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0058 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0059 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0060 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0061 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0068 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0069 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0071 | — |
No Fix Planned
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0132 | — | ||
| Unresolved product id: CSAFPID-0133 | — | ||
| Unresolved product id: CSAFPID-0134 | — | ||
| Unresolved product id: CSAFPID-0135 | — | ||
| Unresolved product id: CSAFPID-0136 | — | ||
| Unresolved product id: CSAFPID-0137 | — | ||
| Unresolved product id: CSAFPID-0138 | — | ||
| Unresolved product id: CSAFPID-0139 | — | ||
| Unresolved product id: CSAFPID-0140 | — | ||
| Unresolved product id: CSAFPID-0141 | — |
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0037 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0038 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0039 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0040 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0041 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0048 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0049 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0051 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0057 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0058 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0059 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0060 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0061 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0068 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0069 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0071 | — |
No Fix Planned
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0132 | — | ||
| Unresolved product id: CSAFPID-0133 | — | ||
| Unresolved product id: CSAFPID-0134 | — | ||
| Unresolved product id: CSAFPID-0135 | — | ||
| Unresolved product id: CSAFPID-0136 | — | ||
| Unresolved product id: CSAFPID-0137 | — | ||
| Unresolved product id: CSAFPID-0138 | — | ||
| Unresolved product id: CSAFPID-0139 | — | ||
| Unresolved product id: CSAFPID-0140 | — | ||
| Unresolved product id: CSAFPID-0141 | — |
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0037 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0038 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0039 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0040 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0041 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0048 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0049 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0051 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0057 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0058 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0059 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0060 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0061 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0068 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0069 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0071 | — |
No Fix Planned
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0132 | — | ||
| Unresolved product id: CSAFPID-0133 | — | ||
| Unresolved product id: CSAFPID-0134 | — | ||
| Unresolved product id: CSAFPID-0135 | — | ||
| Unresolved product id: CSAFPID-0136 | — | ||
| Unresolved product id: CSAFPID-0137 | — | ||
| Unresolved product id: CSAFPID-0138 | — | ||
| Unresolved product id: CSAFPID-0139 | — | ||
| Unresolved product id: CSAFPID-0140 | — | ||
| Unresolved product id: CSAFPID-0141 | — |
9.8 (Critical)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0032 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0033 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0034 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0035 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0036 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0037 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0038 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0039 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0040 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0041 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0043 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0044 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0046 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0048 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0049 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0051 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0052 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0053 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0054 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0055 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0056 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0057 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0058 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0059 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0060 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0061 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0063 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0064 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0066 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0068 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0069 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0071 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0132 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0133 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0134 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0135 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0136 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0137 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0138 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0139 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0140 | — |
No Fix Planned
|
|
| Unresolved product id: CSAFPID-0141 | — |
No Fix Planned
|
References
5 references
Acknowledgments
E.ON Pentesting
{
"document": {
"acknowledgments": [
{
"organization": "E.ON Pentesting",
"summary": "discovering and reporting this vulnerability and providing a proof of concept."
}
],
"aggregate_severity": {
"text": "High"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "legal_disclaimer",
"text": "As a content provider, BSI is responsible under general law for its own content distributed for use. However, it remains your responsibility to carefully check usage and/or implementation of information provided with the content.",
"title": "Legal disclaimer"
},
{
"category": "summary",
"text": "An attacker can exploit multiple vulnerabilities in VibroLine and AvibiaLine devices to gain unauthorized access or execute a denial of service attack.",
"title": "Summary"
},
{
"category": "description",
"text": "The VibroLine and AvibiaLine devices are a condition monitoring solution for industrial applications",
"title": "Product description"
}
],
"publisher": {
"category": "coordinator",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "external",
"summary": "IDS-2026-0001 - CSAF version",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json"
},
{
"category": "external",
"summary": "IDS-2026-0001 - HTML version",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html"
},
{
"category": "external",
"summary": "AVIBIA-2026-0001 - CSAF version",
"url": "https://www.avibia.de/.well-known/csaf/white/2026/avibia-2026-0001.json"
},
{
"category": "external",
"summary": "AVIBIA-2026-0001 - HTML version",
"url": "https://www.avibia.de/.well-known/csaf/white/2026/avibia-2026-0001.html"
},
{
"category": "self",
"summary": "BSI-2026-0001 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/bsi-2026-0001.json"
}
],
"title": "Unauthorized access affects VibroLine and AvibiaLine devices",
"tracking": {
"aliases": [
"IDS-2026-0001",
"AVIBIA-2026-0001"
],
"current_release_date": "2026-02-02T13:00:00.000Z",
"generator": {
"date": "2026-01-29T13:36:39.007Z",
"engine": {
"name": "Secvisogram",
"version": "2.5.42"
}
},
"id": "BSI-2026-0001",
"initial_release_date": "2026-02-02T13:00:00.000Z",
"revision_history": [
{
"date": "2026-02-02T13:00:00.000Z",
"number": "1",
"summary": "Initial publication"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "VLE1 HD 4.0",
"product": {
"name": "VibroLine VLE1 HD 4.0",
"product_id": "CSAFPID-0101",
"product_identification_helper": {
"skus": [
"i8005"
]
}
}
},
{
"category": "product_name",
"name": "VLE2 HD 4.0",
"product": {
"name": "VibroLine VLE2 HD 4.0",
"product_id": "CSAFPID-0102",
"product_identification_helper": {
"skus": [
"i8006"
]
}
}
},
{
"category": "product_name",
"name": "VLE4 HD 4.0",
"product": {
"name": "VibroLine VLE4 HD 4.0",
"product_id": "CSAFPID-0103",
"product_identification_helper": {
"skus": [
"i8007"
]
}
}
},
{
"category": "product_name",
"name": "VLE6 HD 4.0",
"product": {
"name": "VibroLine VLE6 HD 4.0",
"product_id": "CSAFPID-0104",
"product_identification_helper": {
"skus": [
"i8008"
]
}
}
},
{
"category": "product_name",
"name": "VLE8 HD 4.0",
"product": {
"name": "VibroLine VLE8 HD 4.0",
"product_id": "CSAFPID-0105",
"product_identification_helper": {
"skus": [
"i8009"
]
}
}
}
],
"category": "product_family",
"name": "VLE"
},
{
"branches": [
{
"category": "product_name",
"name": "VLX1 HD 4.0",
"product": {
"name": "VibroLine VLX1 HD 4.0",
"product_id": "CSAFPID-0106",
"product_identification_helper": {
"skus": [
"i80015"
]
}
}
},
{
"category": "product_name",
"name": "VLX2 HD 4.0",
"product": {
"name": "VibroLine VLX2 HD 4.0",
"product_id": "CSAFPID-0107",
"product_identification_helper": {
"skus": [
"i80016"
]
}
}
},
{
"category": "product_name",
"name": "VLX4 HD 4.0",
"product": {
"name": "VibroLine VLX4 HD 4.0",
"product_id": "CSAFPID-0108",
"product_identification_helper": {
"skus": [
"i80017"
]
}
}
},
{
"category": "product_name",
"name": "VLX6 HD 4.0",
"product": {
"name": "VibroLine VLX6 HD 4.0",
"product_id": "CSAFPID-0109",
"product_identification_helper": {
"skus": [
"i80018"
]
}
}
},
{
"category": "product_name",
"name": "VLX8 HD 4.0",
"product": {
"name": "VibroLine VLX8 HD 4.0",
"product_id": "CSAFPID-0110",
"product_identification_helper": {
"skus": [
"i80019"
]
}
}
}
],
"category": "product_family",
"name": "VLX"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=1.4.1074|\u003c=1.4.1116",
"product": {
"name": "VibroLine 4.0 VLE Firmware 1.4.1074 - 1.4.1116",
"product_id": "CSAFPID-0111"
}
}
],
"category": "product_name",
"name": "VibroLine 4.0 VLE Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=1.5.1074|\u003c=1.5.1116",
"product": {
"name": "VibroLine 4.0 VLX Firmware 1.5.1074 - 1.5.1116",
"product_id": "CSAFPID-0099"
}
}
],
"category": "product_name",
"name": "VibroLine 4.0 VLX Firmware"
}
],
"category": "product_family",
"name": "VibroLine 4.0 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=4.0.1931|\u003c=4.0.2406",
"product": {
"name": "VibroLine Configurator 4.0.1931 - 4.0.2406",
"product_id": "CSAFPID-0114"
}
}
],
"category": "product_name",
"name": "VibroLine 4.0 Configurator"
}
],
"category": "product_family",
"name": "VibroLine 4.0"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "VLE1 HD 5.0",
"product": {
"name": "VibroLine VLE1 HD 5.0",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"skus": [
"i8005-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLE2 HD 5.0",
"product": {
"name": "VibroLine VLE2 HD 5.0",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"skus": [
"i8006-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLE4 HD 5.0",
"product": {
"name": "VibroLine VLE4 HD 5.0",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"skus": [
"i8007-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLE6 HD 5.0",
"product": {
"name": "VibroLine VLE6 HD 5.0",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"skus": [
"i8008-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLE8 HD 5.0",
"product": {
"name": "VibroLine VLE8 HD 5.0",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"skus": [
"i8009-5.0"
]
}
}
}
],
"category": "product_family",
"name": "VLE"
},
{
"branches": [
{
"category": "product_name",
"name": "VLX1 HD 5.0",
"product": {
"name": "VibroLine VLX1 HD 5.0",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"skus": [
"i80015-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLX2 HD 5.0",
"product": {
"name": "VibroLine VLX2 HD 5.0",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"skus": [
"i80016-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLX4 HD 5.0",
"product": {
"name": "VibroLine VLX4 HD 5.0",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"skus": [
"i80017-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLX6 HD 5.0",
"product": {
"name": "VibroLine VLX6 HD 5.0",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"skus": [
"i80018-5.0"
]
}
}
},
{
"category": "product_name",
"name": "VLX8 HD 5.0",
"product": {
"name": "VibroLine VLX8 HD 5.0",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"skus": [
"i80019-5.0"
]
}
}
}
],
"category": "product_family",
"name": "VLX"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=2.1.1340|\u003c=2.1.1387",
"product": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387",
"product_id": "CSAFPID-0011"
}
},
{
"category": "product_version",
"name": "2.1.1866",
"product": {
"name": "VibroLine 5.0 Firmware 2.1.1866",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"hashes": [
{
"file_hashes": [
{
"algorithm": "sha256",
"value": "67DE7F19D9CC41030C82D30817FD4B95EA9C183F8482A7F325571AC709DD715F"
}
],
"filename": "VLX_HD_20260202.vlfw"
}
]
}
}
}
],
"category": "product_name",
"name": "VibroLine 5.0 Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=5.0.2416|\u003c=5.1.2547",
"product": {
"name": "VibroLine Configurator 5.0.2416 - 5.0.2486",
"product_id": "CSAFPID-0014"
}
},
{
"category": "product_version",
"name": "5.1.2732",
"product": {
"name": "VibroLine Configurator 5.1.2730",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"hashes": [
{
"file_hashes": [
{
"algorithm": "sha256",
"value": "86D5007A3606ABF5385AFBD0BF3483728B78A978C641F09A5DEB49B5862D1F84"
}
],
"filename": "VibroLine_Setup_5.1.2732.exe"
}
]
}
}
}
],
"category": "product_name",
"name": "VibroLine 5.0 Configurator"
}
],
"category": "product_family",
"name": "VibroLine 5.0"
}
],
"category": "vendor",
"name": "IDS Innomic Schwingungsmesstechnik GmbH"
},
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "AVLE2",
"product": {
"name": "AvibiaLine AVLE2",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL2"
]
}
}
},
{
"category": "product_name",
"name": "AVLE4",
"product": {
"name": "AvibiaLine AVLE4",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL4"
]
}
}
},
{
"category": "product_name",
"name": "AVLE8",
"product": {
"name": "AvibiaLine AVLE8",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL8"
]
}
}
}
],
"category": "product_name",
"name": "AVLE"
},
{
"branches": [
{
"category": "product_name",
"name": "AVLX2",
"product": {
"name": "AvibiaLine AVLX2",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL-X2 V5.0"
]
}
}
},
{
"category": "product_name",
"name": "AVLX4",
"product": {
"name": "AvibiaLine AVLX4",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL-X4 V5.0"
]
}
}
},
{
"category": "product_name",
"name": "AVLX8",
"product": {
"name": "AvibiaLine AVLX8",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"skus": [
"AVIBIAline AVL-X8 V5.0"
]
}
}
}
],
"category": "product_name",
"name": "AVLX"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=2.1.1340|\u003c=2.1.1387",
"product": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387",
"product_id": "CSAFPID-0027"
}
},
{
"category": "product_version",
"name": "2.1.1866",
"product": {
"name": "AvibiaLine Firmware 2.1.1866",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"hashes": [
{
"file_hashes": [
{
"algorithm": "sha256",
"value": "67DE7F19D9CC41030C82D30817FD4B95EA9C183F8482A7F325571AC709DD715F"
}
],
"filename": "AVLX_HD_20260202.vlfw"
}
]
}
}
}
],
"category": "product_name",
"name": "AvibiaLine Firmware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=5.0.2416|\u003c=5.0.2486",
"product": {
"name": "AvibiaLine Configurator 5.0.2416 - 5.0.2486",
"product_id": "CSAFPID-0030"
}
},
{
"category": "product_version",
"name": "5.1.2732",
"product": {
"name": "AvibiaLine Configurator 5.1.2730",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"hashes": [
{
"file_hashes": [
{
"algorithm": "sha256",
"value": "0161933D64226AAA79306A387097E5F2843C234F0E71ADB7ECA659F34DBE9A1A"
}
],
"filename": "AvibiaLine_Setup_5.1.2732.exe"
}
]
}
}
}
],
"category": "product_name",
"name": "AvibiaLine Configurator"
}
],
"category": "product_family",
"name": "AvibiaLine"
}
],
"category": "vendor",
"name": "avibia GmbH"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLE1 HD 5.0",
"product_id": "CSAFPID-0032"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLE2 HD 5.0",
"product_id": "CSAFPID-0033"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLE4 HD 5.0",
"product_id": "CSAFPID-0034"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLE6 HD 5.0",
"product_id": "CSAFPID-0035"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLE8 HD 5.0",
"product_id": "CSAFPID-0036"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLX1 HD 5.0",
"product_id": "CSAFPID-0037"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLX2 HD 5.0",
"product_id": "CSAFPID-0038"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLX4 HD 5.0",
"product_id": "CSAFPID-0039"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLX6 HD 5.0",
"product_id": "CSAFPID-0040"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1340 - 2.1.1387 installed on VibroLine VLX8 HD 5.0",
"product_id": "CSAFPID-0041"
},
"product_reference": "CSAFPID-0011",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLE2 HD 5.0",
"product_id": "CSAFPID-0043"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0018"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLE4 HD 5.0",
"product_id": "CSAFPID-0044"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0019"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLE8 HD 5.0",
"product_id": "CSAFPID-0046"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0021"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLX2 HD 5.0",
"product_id": "CSAFPID-0048"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0023"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLX4 HD 5.0",
"product_id": "CSAFPID-0049"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0024"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1340 - 2.1.1387 installed on AvibiaLine AVLX8 HD 5.0",
"product_id": "CSAFPID-0051"
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0026"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLE1 HD 5.0",
"product_id": "CSAFPID-0052"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLE2 HD 5.0",
"product_id": "CSAFPID-0053"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLE4 HD 5.0",
"product_id": "CSAFPID-0054"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLE6 HD 5.0",
"product_id": "CSAFPID-0055"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLE8 HD 5.0",
"product_id": "CSAFPID-0056"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLX1 HD 5.0",
"product_id": "CSAFPID-0057"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLX2 HD 5.0",
"product_id": "CSAFPID-0058"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLX4 HD 5.0",
"product_id": "CSAFPID-0059"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLX6 HD 5.0",
"product_id": "CSAFPID-0060"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 5.0 Firmware 2.1.1866 installed on VibroLine VLX8 HD 5.0",
"product_id": "CSAFPID-0061"
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLE2 HD 5.0",
"product_id": "CSAFPID-0063"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0018"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLE4 HD 5.0",
"product_id": "CSAFPID-0064"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0019"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLE8 HD 5.0",
"product_id": "CSAFPID-0066"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0021"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLX2 HD 5.0",
"product_id": "CSAFPID-0068"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0023"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLX4 HD 5.0",
"product_id": "CSAFPID-0069"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0024"
},
{
"category": "installed_on",
"full_product_name": {
"name": "AvibiaLine Firmware 2.1.1866 installed on AvibiaLine AVLX8 HD 5.0",
"product_id": "CSAFPID-0071"
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0026"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.4.1074 - 1.4.1116 installed on VibroLine VLE1 HD 4.0",
"product_id": "CSAFPID-0132"
},
"product_reference": "CSAFPID-0111",
"relates_to_product_reference": "CSAFPID-0101"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.4.1074 - 1.4.1116 installed on VibroLine VLE2 HD 4.0",
"product_id": "CSAFPID-0133"
},
"product_reference": "CSAFPID-0111",
"relates_to_product_reference": "CSAFPID-0102"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.4.1074 - 1.4.1116 installed on VibroLine VLE4 HD 4.0",
"product_id": "CSAFPID-0134"
},
"product_reference": "CSAFPID-0111",
"relates_to_product_reference": "CSAFPID-0103"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.4.1074 - 1.4.1116 installed on VibroLine VLE6 HD 4.0",
"product_id": "CSAFPID-0135"
},
"product_reference": "CSAFPID-0111",
"relates_to_product_reference": "CSAFPID-0104"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.4.1074 - 1.4.1116 installed on VibroLine VLE8 HD 4.0",
"product_id": "CSAFPID-0136"
},
"product_reference": "CSAFPID-0111",
"relates_to_product_reference": "CSAFPID-0105"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.5.1074 - 1.5.1116 installed on VibroLine VLX1 HD 4.0",
"product_id": "CSAFPID-0137"
},
"product_reference": "CSAFPID-0099",
"relates_to_product_reference": "CSAFPID-0106"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.5.1074 - 1.5.1116 installed on VibroLine VLX2 HD 4.0",
"product_id": "CSAFPID-0138"
},
"product_reference": "CSAFPID-0099",
"relates_to_product_reference": "CSAFPID-0107"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.5.1074 - 1.5.1116 installed on VibroLine VLX4 HD 4.0",
"product_id": "CSAFPID-0139"
},
"product_reference": "CSAFPID-0099",
"relates_to_product_reference": "CSAFPID-0108"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.5.1074 - 1.5.1116 installed on VibroLine VLX6 HD 4.0",
"product_id": "CSAFPID-0140"
},
"product_reference": "CSAFPID-0099",
"relates_to_product_reference": "CSAFPID-0109"
},
{
"category": "installed_on",
"full_product_name": {
"name": "VibroLine 4.0 Firmware 1.5.1074 - 1.5.1116 installed on VibroLine VLX8 HD 4.0",
"product_id": "CSAFPID-0141"
},
"product_reference": "CSAFPID-0099",
"relates_to_product_reference": "CSAFPID-0110"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50975",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"notes": [
{
"category": "summary",
"text": "The ethernet and USB connections are not properly isolated allowing an attacker to configure and reset the device if configuration via ethernet is enabled and there is at least one legitimately authenticated connection active at the time of the attack.",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
],
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051"
],
"known_not_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update VibroLine VLX HD 5.0 devices to firmware version 2.1.1866 or later which includes a fix for this vulnerability.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041"
],
"restart_required": {
"category": "machine",
"details": "VibroLine VLX HD 5.0 devices will be restarted during firmware update."
},
"url": "https://www.innomic.com/downloads/"
},
{
"category": "vendor_fix",
"details": "Update AvibiaLine AVLX devices to firmware version 2.1.1866 or later which includes a fix for this vulnerability.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051"
],
"restart_required": {
"category": "machine",
"details": "AvibiaLine AVLX devices will be restarted during firmware update."
},
"url": "https://www.avibia.de/info-center/download/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.2,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "FUNCTIONAL",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 8.2,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051"
]
}
],
"title": "Unauthenticated Access To Device Configuration"
},
{
"cve": "CVE-2022-50976",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"notes": [
{
"category": "summary",
"text": "Resetting the device passwords using an invalid reset file causes a full device reset if the device is connected via USB.",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"CSAFPID-0016",
"CSAFPID-0031"
],
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0030"
],
"known_not_affected": [
"CSAFPID-0114"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update VibroLine Configurator to version 5.1.2730 or later which includes a fix for this vulnerability.",
"product_ids": [
"CSAFPID-0014"
],
"url": "https://www.innomic.com/downloads/"
},
{
"category": "vendor_fix",
"details": "Update AvibiaLine Configurator to version 5.1.2730 or later which includes a fix for this vulnerability.",
"product_ids": [
"CSAFPID-0030"
],
"url": "https://www.avibia.de/info-center/download/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.1,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "FUNCTIONAL",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0014",
"CSAFPID-0030"
]
}
],
"title": "Unintended Device Reset"
},
{
"cve": "CVE-2022-50977",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The function to switch between multiple configuration presets via HTTP does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset.",
"title": "Vulnerability summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
],
"known_not_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Isolate the network from the public internet and limit access to trustworthy devices (see section \"Network Security\" in the manual).\n\nIf only one configuration preset is required remove any other presets.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.1,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "UNAVAILABLE",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"title": "Unauthenticated Configuration Switch Via HTTP"
},
{
"cve": "CVE-2022-50978",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The function to switch between multiple configuration presets via Modbus (TCP) does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset.",
"title": "Vulnerability summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
],
"known_not_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Isolate the network from the public internet and limit access to trustworthy devices (see section \"Network Security\" in the manual).\n\nIf only one configuration preset is required remove any other presets.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.1,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "UNAVAILABLE",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"title": "Unauthenticated Configuration Switch Via Modbus (TCP)"
},
{
"cve": "CVE-2022-50979",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The function to switch between multiple configuration presets via Modbus (RS485) does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset.",
"title": "Vulnerability summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
],
"known_not_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Limit access to the RS485 bus to trustworthy devices.\n\nIf only one configuration preset is required remove any other presets.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalScore": 6.2,
"environmentalSeverity": "MEDIUM",
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "UNAVAILABLE",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.2,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"title": "Unauthenticated Configuration Switch Via Modbus (RS485)"
},
{
"cve": "CVE-2022-50980",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The function to switch between multiple configuration presets via CAN does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset.",
"title": "Vulnerability summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
],
"known_not_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Limit access to the CAN bus to trustworthy devices.\n\nIf only one configuration preset is required remove any other presets.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalScore": 6.2,
"environmentalSeverity": "MEDIUM",
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "UNAVAILABLE",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.2,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071"
]
}
],
"title": "Unauthenticated Configuration Switch Via CAN"
},
{
"cve": "CVE-2022-50981",
"cwe": {
"id": "CWE-521",
"name": "Weak Password Requirements"
},
"notes": [
{
"category": "summary",
"text": "Devices are shipped without a password by default and setting a password is not enforced.",
"title": "Vulnerability summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Assign a password to the device on first use.",
"product_ids": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 9,
"environmentalSeverity": "CRITICAL",
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "WORKAROUND",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 9,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059",
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0063",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0071",
"CSAFPID-0132",
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0136",
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0139",
"CSAFPID-0140",
"CSAFPID-0141"
]
}
],
"title": "No Password By Default"
}
]
}
FKIE_CVE-2022-50976
Vulnerability from fkie_nvd - Published: 2026-02-02 15:16 - Updated: 2026-04-15 00:35
Severity
Summary
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB."
},
{
"lang": "es",
"value": "Un atacante local podr\u00eda causar un restablecimiento completo del dispositivo al restablecer las contrase\u00f1as del dispositivo usando un archivo de restablecimiento no v\u00e1lido a trav\u00e9s de USB."
}
],
"id": "CVE-2022-50976",
"lastModified": "2026-04-15T00:35:42.020",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.5,
"impactScore": 5.2,
"source": "info@cert.vde.com",
"type": "Primary"
}
]
},
"published": "2026-02-02T15:16:28.413",
"references": [
{
"source": "info@cert.vde.com",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html"
},
{
"source": "info@cert.vde.com",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json"
}
],
"sourceIdentifier": "info@cert.vde.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1288"
}
],
"source": "info@cert.vde.com",
"type": "Primary"
}
]
}
GHSA-JH3J-GC93-659H
Vulnerability from github – Published: 2026-02-02 15:30 – Updated: 2026-02-02 15:30
VLAI
Details
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.
Severity
7.7 (High)
{
"affected": [],
"aliases": [
"CVE-2022-50976"
],
"database_specific": {
"cwe_ids": [
"CWE-1288"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-02-02T15:16:28Z",
"severity": "HIGH"
},
"details": "A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.",
"id": "GHSA-jh3j-gc93-659h",
"modified": "2026-02-02T15:30:34Z",
"published": "2026-02-02T15:30:34Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50976"
},
{
"type": "WEB",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html"
},
{
"type": "WEB",
"url": "https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"type": "CVSS_V3"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…