IDS VibroLine Devices Unauthenticated Remote Access Vulnerability

A vulnerability exists in IDS VibroLine devices running version 5.0 Firmware 2.1.1340 through 2.1.1387, allowing an unauthenticated remote attacker to exploit an active session of a logged-in user. If configuration via Ethernet is enabled, the attacker can gain full access to the device. This issue arises because Ethernet and USB connections are not properly isolated, enabling unauthorized configuration and device resets.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device, with the ability to modify configurations and reset the device remotely.

Remediation

Users are advised to update VibroLine VLX HD 5.0 devices to firmware version 2.1.1866 or later, which includes a fix for this vulnerability. The firmware update will require a restart of the device.