CVE-2026-14169highCWE-696

CVE-2026-14169: falha de alta gravidade em ads-tec Industrial IT DVG-IRF1401

ads-tec Industrial IT: Account lockout via non-atomic user creation

Publicada em

Seguir esta CVE+ Monitorar DVG-IRF1401+ Monitorar DVG-IRF1421

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.5%
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
ads-tec Industrial IT · DVG-IRF1401ads-tec Industrial IT · DVG-IRF1421ads-tec Industrial IT · DVG-IRF3401ads-tec Industrial IT · DVG-IRF3421ads-tec Industrial IT · DVG-IRF3801ads-tec Industrial IT · DVG-IRF3821
CVEs relacionadas — ads-tec Industrial IT DVG-IRF1401

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14168HIGHads-tec Industrial IT: Vertical privilege escalation via configuration table writeEPSS 0.5%CVE-2026-14167HIGHads-tec Industrial IT: Privilege escalation during configuration importEPSS 0.5%CVE-2026-14171MEDIUMads-tec Industrial IT: Post-login open redirect in the web interfaceEPSS 0.3%