Description
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Innomic | VibroLine VLX1 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| Innomic | VibroLine VLX2 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| Innomic | VibroLine VLX4 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| Innomic | VibroLine VLX6 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| Innomic | VibroLine VLX8 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| avibia | AvibiaLine AVLX1 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| avibia | AvibiaLine AVLX2 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| avibia | AvibiaLine AVLX4 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| avibia | AvibiaLine AVLX6 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| avibia | AvibiaLine AVLX8 HD 5.0 | 2.1.1340 – ≤ 2.1.1387 | 2.1.1866 |
| Innomic | VibroLine VLE1 HD 5.0 | — | 2.1.1340 |
| Innomic | VibroLine VLE2 HD 5.0 | — | 2.1.1340 |
| Innomic | VibroLine VLE4 HD 5.0 | — | 2.1.1340 |
| Innomic | VibroLine VLE6 HD 5.0 | — | 2.1.1340 |
| Innomic | VibroLine VLE8 HD 5.0 | — | 2.1.1340 |
| Innomic | AvibiaLine AVLE1 HD 5.0 | — | 2.1.1340 |
| Innomic | AvibiaLine AVLE2 HD 5.0 | — | 2.1.1340 |
| Innomic | AvibiaLine AVLE4 HD 5.0 | — | 2.1.1340 |
| Innomic | AvibiaLine AVLE6 HD 5.0 | — | 2.1.1340 |
| Innomic | AvibiaLine AVLE8 HD 5.0 | — | 2.1.1340 |
| Innomic | VibroLine VLE1 HD 4.0 | — | 1.4.1074 |
| Innomic | VibroLine VLE2 HD 4.0 | — | 1.4.1074 |
| Innomic | VibroLine VLE4 HD 4.0 | — | 1.4.1074 |
| Innomic | VibroLine VLE6 HD 4.0 | — | 1.4.1074 |
| Innomic | VibroLine VLE8 HD 4.0 | — | 1.4.1074 |
| Innomic | VibroLine VLX1 HD 4.0 | — | 1.5.1074 |
| Innomic | VibroLine VLX2 HD 4.0 | — | 1.5.1074 |
| Innomic | VibroLine VLX4 HD 4.0 | — | 1.5.1074 |
| Innomic | VibroLine VLX6 HD 4.0 | — | 1.5.1074 |
| Innomic | VibroLine VLX8 HD 4.0 | — | 1.5.1074 |
Advisories 1
- BSI-2026-0001 Unauthorized access affects VibroLine and AvibiaLine devices BSI CERT-Bund (WID) · Feb 2, 2026