CVE-2022-50978CWE-306

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)

High · published February 2, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

⚡ A crafty configuration switcheroo via Modbus could throw your operations into chaos! This vulnerability lets an unauthenticated attacker flip between presets without breaking a sweat. 🔄 Think of it like a hotel guest who sneaks into the reception area and swaps room keys — suddenly, guests are opening doors they shouldn’t, causing confusion all around. This vulnerability allows attackers to manipulate critical settings without any authentication checks, just like that sneaky guest! An attacker could potentially disrupt operations by toggling between configuration presets, leading to unexpected behaviors in your systems. This could result in downtime, miscommunication between devices, or even a complete service outage. The chaos could be absolutely devastating for your organization!

Put simply

Think of it like a hotel guest who sneaks into the reception area and swaps room keys — suddenly, guests are opening doors they shouldn’t, causing confusion all around. This vulnerability allows attackers to manipulate critical settings without any authentication checks, just like that sneaky guest! CVE-2022-50978 is a vulnerability in the Modbus TCP protocol that enables an unauthenticated remote attacker to change configuration presets on devices, effectively bypassing security measures. This flaw occurs due to insufficient validation of incoming requests in the Modbus communication.

What to do

An attacker could potentially disrupt operations by toggling between configuration presets, leading to unexpected behaviors in your systems. This could result in downtime, miscommunication between devices, or even a complete service outage. The chaos could be absolutely devastating for your organization! To mitigate this risk, ensure that your devices are updated with the latest firmware that contains the security patches. Limit access to Modbus interfaces, and configure firewalls to restrict traffic to known, trusted sources. Regularly audit and monitor your network for any unusual activity that could indicate attempted exploitations. You've got this! With the right steps, you can lock down your systems and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-02T14:09Z
EPSS history
Timeline
  • 02 FEB 14:09Z
    Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated configuration preset change via Modbus (TCP)
    cvelistv5