Skip to content
OpenAdvisories

Description

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled.

Affected products

VendorProductAffectedFixed
Innomic VibroLine VLX1 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
Innomic VibroLine VLX2 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
Innomic VibroLine VLX4 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
Innomic VibroLine VLX6 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
Innomic VibroLine VLX8 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
avibia AvibiaLine AVLX1 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
avibia AvibiaLine AVLX2 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
avibia AvibiaLine AVLX4 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
avibia AvibiaLine AVLX6 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
avibia AvibiaLine AVLX8 HD 5.0 2.1.1340 – ≤ 2.1.1387 2.1.1866
Innomic VibroLine VLE1 HD 5.0 — 2.1.1340
Innomic VibroLine VLE2 HD 5.0 — 2.1.1340
Innomic VibroLine VLE4 HD 5.0 — 2.1.1340
Innomic VibroLine VLE6 HD 5.0 — 2.1.1340
Innomic VibroLine VLE8 HD 5.0 — 2.1.1340
Innomic AvibiaLine AVLE1 HD 5.0 — 2.1.1340
Innomic AvibiaLine AVLE2 HD 5.0 — 2.1.1340
Innomic AvibiaLine AVLE4 HD 5.0 — 2.1.1340
Innomic AvibiaLine AVLE6 HD 5.0 — 2.1.1340
Innomic AvibiaLine AVLE8 HD 5.0 — 2.1.1340
Innomic VibroLine VLE1 HD 4.0 — 1.4.1074
Innomic VibroLine VLE2 HD 4.0 — 1.4.1074
Innomic VibroLine VLE4 HD 4.0 — 1.4.1074
Innomic VibroLine VLE6 HD 4.0 — 1.4.1074
Innomic VibroLine VLE8 HD 4.0 — 1.4.1074
Innomic VibroLine VLX1 HD 4.0 — 1.5.1074
Innomic VibroLine VLX2 HD 4.0 — 1.5.1074
Innomic VibroLine VLX4 HD 4.0 — 1.5.1074
Innomic VibroLine VLX6 HD 4.0 — 1.5.1074
Innomic VibroLine VLX8 HD 4.0 — 1.5.1074

Advisories 1

References