IDS VibroLine Devices Unauthenticated Configuration Switch Vulnerability via Modbus (TCP)

A vulnerability exists in IDS VibroLine devices running version 5.0 Firmware 2.1.1340 to 2.1.1387 on the VLX1, VLX2, VLX4, VLX6, and VLX8 HD 5.0 models. The issue allows an unauthenticated remote attacker to disrupt operations by switching between multiple configuration presets via Modbus (TCP). This vulnerability could be exploited by an attacker with access to the network, particularly if more than one configuration preset is active.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, disrupting normal operations of the affected VibroLine device.

Remediation

Users can update their VibroLine VLX HD 5.0 devices to firmware version 2.1.1866 or later, which includes a fix for this vulnerability. The firmware update will require a restart of the device.