IDS VibroLine Devices Unauthenticated Configuration Switch Vulnerability via HTTP

A vulnerability exists in IDS VibroLine devices running version 5.0 Firmware 2.1.1340 - 2.1.1387 on the VLX1, VLX2, VLX4, VLX6, and VLX8 HD 5.0 models. The issue allows an unauthenticated remote attacker to disrupt operations by switching between multiple configuration presets via HTTP. This vulnerability could be exploited by an attacker with access to the network, particularly if more than one configuration preset is active.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition by disrupting normal operations on the affected device.

Remediation

Users can update their VibroLine VLX HD 5.0 devices to firmware version 2.1.1866 or later, which includes a fix for this vulnerability. The firmware update will require a restart of the device.