Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-14167

ads-tec Industrial IT: Privilege escalation during configuration import

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ads-tec Industrial IT DVG-IRF1401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF1421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3801

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3821

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

References