Local Device Reset Vulnerability in Innomic Products
CVE-2022-50976

7.7HIGH

Key Information:

Vendor

Innomic

Status
Vibroline Configurator 5.0
Avibialine Configurator 5.0
Vibroline Configurator 4.0
Vendor
CVE Published:
2 February 2026

What is CVE-2022-50976?

A vulnerability exists in Innomic devices that allows a local attacker to perform a full device reset. This can occur when an invalid reset file is used via a USB connection to reset device passwords. Exploiting this vulnerability could lead to unauthorized access and significant disruption of device functionality, emphasizing the need for immediate security measures.

Affected Version(s)

AvibiaLine Configurator 5.0 5.0.2416 <= 5.0.2486

VibroLine Configurator 5.0 5.0.2416 <= 5.0.2486

AvibiaLine Configurator 5.0 5.1.2730

References

https://www.innomic.com/.well-known/csaf/white/2026/ids-2...
vendor-advisory
https://www.innomic.com/.well-known/csaf/white/2026/ids-2...
vendor-advisory

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.