Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-14169

ads-tec Industrial IT: Account lockout via non-atomic user creation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ads-tec Industrial IT DVG-IRF1401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF1421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3401

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3421

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3801

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

ads-tec Industrial IT DVG-IRF3821

Default version status: unaffected

  • 1.0.0 to < 2.3.0affected

References