Description (CNA)
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Innomic / VibroLine VLX1 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| Innomic / VibroLine VLX2 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| Innomic / VibroLine VLX4 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| Innomic / VibroLine VLX6 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| Innomic / VibroLine VLX8 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| avibia / AvibiaLine AVLX1 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| avibia / AvibiaLine AVLX2 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| avibia / AvibiaLine AVLX4 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| avibia / AvibiaLine AVLX6 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| avibia / AvibiaLine AVLX8 HD 5.0 | affected 2.1.1340 through 2.1.1387; unaffected 2.1.1866 |
| Innomic / VibroLine VLE1 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / VibroLine VLE2 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / VibroLine VLE4 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / VibroLine VLE6 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / VibroLine VLE8 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / AvibiaLine AVLE1 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / AvibiaLine AVLE2 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / AvibiaLine AVLE4 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / AvibiaLine AVLE6 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / AvibiaLine AVLE8 HD 5.0 | unaffected 2.1.1340 through 2.1.1387 |
| Innomic / VibroLine VLE1 HD 5.0 | unaffected 2.1.1866 |
| Innomic / VibroLine VLE2 HD 5.0 | unaffected 2.1.1866 |
| Innomic / VibroLine VLE4 HD 5.0 | unaffected 2.1.1866 |
| Innomic / VibroLine VLE6 HD 5.0 | unaffected 2.1.1866 |
| Innomic / VibroLine VLE8 HD 5.0 | unaffected 2.1.1866 |
| Innomic / VibroLine VLE1 HD 4.0 | unaffected 1.4.1074 through 1.4.1116 |
| Innomic / VibroLine VLE2 HD 4.0 | unaffected 1.4.1074 through 1.4.1116 |
| Innomic / VibroLine VLE4 HD 4.0 | unaffected 1.4.1074 through 1.4.1116 |
| Innomic / VibroLine VLE6 HD 4.0 | unaffected 1.4.1074 through 1.4.1116 |
| Innomic / VibroLine VLE8 HD 4.0 | unaffected 1.4.1074 through 1.4.1116 |
| Innomic / VibroLine VLX1 HD 4.0 | unaffected 1.5.1074 through 1.5.1116 |
| Innomic / VibroLine VLX2 HD 4.0 | unaffected 1.5.1074 through 1.5.1116 |
| Innomic / VibroLine VLX4 HD 4.0 | unaffected 1.5.1074 through 1.5.1116 |
| Innomic / VibroLine VLX6 HD 4.0 | unaffected 1.5.1074 through 1.5.1116 |
| Innomic / VibroLine VLX8 HD 4.0 | unaffected 1.5.1074 through 1.5.1116 |
CWE
CWE-346
References
- https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html
- https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json
ADP enrichment
No English description supplied.
No references supplied.