Unauthorized access affects VibroLine and AvibiaLine devices

Risk Summary

An attacker can exploit multiple vulnerabilities in VibroLine and AvibiaLine devices to gain unauthorized access or execute a denial of service attack.

CVEs (7)

Remediations

• Update VibroLine VLX HD 5.0 devices to firmware version 2.1.1866 or later which includes a fix for this vulnerability.
• Update AvibiaLine AVLX devices to firmware version 2.1.1866 or later which includes a fix for this vulnerability.
• Update VibroLine Configurator to version 5.1.2730 or later which includes a fix for this vulnerability.
• Update AvibiaLine Configurator to version 5.1.2730 or later which includes a fix for this vulnerability.
• Isolate the network from the public internet and limit access to trustworthy devices (see section "Network Security" in the manual). If only one configuration preset is required remove any other presets.
• Limit access to the RS485 bus to trustworthy devices. If only one configuration preset is required remove any other presets.
• Limit access to the CAN bus to trustworthy devices. If only one configuration preset is required remove any other presets.
• Assign a password to the device on first use.

Affected Vendors

Affected Products (11)