Innomic Vibroline VLX6 Hd 4.0 vulnerabilities

6 CVEs affecting Innomic Vibroline VLX6 Hd 4.0, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-50981, published 2026-02-02.

More from Innomic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-50981, published 2026-02-02. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. An unauthenticated remote attacker can gain full access on the affected devices as they are shipped without a password by default and setting one is not enforced.
• CVE-2022-50978, published 2026-02-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).
• CVE-2022-50977, published 2026-02-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
• CVE-2022-50975, published 2026-02-02. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
• CVE-2022-50980, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.
• CVE-2022-50979, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (RS485).