What’s Vulnerable › Vulnerabilities

CVE-2022-50976: Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-02 · updated 2026-06-17
• Weakness: CWE-1288

Description

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB.

Affected products

• AvibiaLine Configurator 5.0: from 5.0.2416 through 5.0.2486
• Innomic VibroLine Configurator 5.0: from 5.0.2416 through 5.0.2486

References

• https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html
• https://www.innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json

Get alerted when CVE-2022-50976 or the next vulnerability affects your stack