CVE-2026-14167highCWE-863

CVE-2026-14167: falha de alta gravidade em ads-tec Industrial IT DVG-IRF1401

ads-tec Industrial IT: Privilege escalation during configuration import

Publicada em

Seguir esta CVE+ Monitorar DVG-IRF1401+ Monitorar DVG-IRF1421

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.5%
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
ads-tec Industrial IT · DVG-IRF1401ads-tec Industrial IT · DVG-IRF1421ads-tec Industrial IT · DVG-IRF3401ads-tec Industrial IT · DVG-IRF3421ads-tec Industrial IT · DVG-IRF3801ads-tec Industrial IT · DVG-IRF3821
CVEs relacionadas — ads-tec Industrial IT DVG-IRF1401

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14169HIGHads-tec Industrial IT: Account lockout via non-atomic user creationEPSS 0.5%CVE-2026-14168HIGHads-tec Industrial IT: Vertical privilege escalation via configuration table writeEPSS 0.5%CVE-2026-14171MEDIUMads-tec Industrial IT: Post-login open redirect in the web interfaceEPSS 0.3%