CVE-2026-14168highCWE-862

CVE-2026-14168: falha de alta gravidade em ads-tec Industrial IT DVG-IRF1401

ads-tec Industrial IT: Vertical privilege escalation via configuration table write

Publicada em

Seguir esta CVE+ Monitorar DVG-IRF1401+ Monitorar DVG-IRF1421

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ads-tec Industrial IT · DVG-IRF1401ads-tec Industrial IT · DVG-IRF1421ads-tec Industrial IT · DVG-IRF3401ads-tec Industrial IT · DVG-IRF3421ads-tec Industrial IT · DVG-IRF3801ads-tec Industrial IT · DVG-IRF3821
CVEs relacionadas — ads-tec Industrial IT DVG-IRF1401

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14169HIGHads-tec Industrial IT: Account lockout via non-atomic user creationEPSS 0.5%CVE-2026-14167HIGHads-tec Industrial IT: Privilege escalation during configuration importEPSS 0.5%CVE-2026-14171MEDIUMads-tec Industrial IT: Post-login open redirect in the web interfaceEPSS 0.3%