Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-14168

ads-tec Industrial IT: Vertical privilege escalation via configuration table write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ads-tec Industrial IT DVG-IRF1401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF1421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3801

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3821

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

References