SARA / Free Tools / CVE / CVE-2022-50980

CVE-2022-50980 — A unauthenticated adjacent attacker could potentially disrupt operations by swit

A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.

CVSS
6.5 MEDIUM
EPSS
0.01% (top 97.80%)
CWE
CWE-306
Published
2026-02-02T14:11:21.236Z
Last modified
2026-02-02T17:23:17.439Z
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

01What is this vulnerability?

A unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via CAN.

02Affected products

VendorProductVersions
InnomicVibroLine VLX1 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLX2 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLX4 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLX6 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLX8 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLX1 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLX2 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLX4 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLX6 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLX8 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLE1 HD 5.02.1.1340
InnomicVibroLine VLE2 HD 5.02.1.1340
InnomicVibroLine VLE4 HD 5.02.1.1340
InnomicVibroLine VLE6 HD 5.02.1.1340
InnomicVibroLine VLE8 HD 5.02.1.1340
avibiaAvibiaLine AVLE1 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLE2 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLE4 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLE6 HD 5.02.1.1340, 2.1.1866
avibiaAvibiaLine AVLE8 HD 5.02.1.1340, 2.1.1866
InnomicVibroLine VLE1 HD 5.02.1.1866
InnomicVibroLine VLE2 HD 5.02.1.1866
InnomicVibroLine VLE4 HD 5.02.1.1866
InnomicVibroLine VLE6 HD 5.02.1.1866
InnomicVibroLine VLE8 HD 5.02.1.1866
InnomicVibroLine VLE1 HD 4.01.4.1074
InnomicVibroLine VLE2 HD 4.01.4.1074
InnomicVibroLine VLE4 HD 4.01.4.1074
InnomicVibroLine VLE6 HD 4.01.4.1074
InnomicVibroLine VLE8 HD 4.01.4.1074
InnomicVibroLine VLX1 HD 4.01.5.1074
InnomicVibroLine VLX2 HD 4.01.5.1074
InnomicVibroLine VLX4 HD 4.01.5.1074
InnomicVibroLine VLX6 HD 4.01.5.1074
InnomicVibroLine VLX8 HD 4.01.5.1074

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →