Veille CVE

Recherche « ads-tec Industrial IT DVG-IRF3401 »

4 CVE

Critique 0 Élevée 3 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « ads-tec Industrial IT DVG-IRF3401 » ✕
  1. CVE-2026-14171 6.1 Moyenne

    ads-tec Industrial IT DVG-IRF1401 · ads-tec Industrial IT DVG-IRF1421 · ads-tec Industrial IT DVG-IRF3401 · ads-tec Industrial IT DVG-IRF3421

    An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.

  2. CVE-2026-14169 8.1 Élevée

    ads-tec Industrial IT DVG-IRF1401 · ads-tec Industrial IT DVG-IRF1421 · ads-tec Industrial IT DVG-IRF3401 · ads-tec Industrial IT DVG-IRF3421

    Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.

  3. CVE-2026-14168 8.8 Élevée

    ads-tec Industrial IT DVG-IRF1401 · ads-tec Industrial IT DVG-IRF1421 · ads-tec Industrial IT DVG-IRF3401 · ads-tec Industrial IT DVG-IRF3421

    A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

  4. CVE-2026-14167 8.8 Élevée

    ads-tec Industrial IT DVG-IRF1401 · ads-tec Industrial IT DVG-IRF1421 · ads-tec Industrial IT DVG-IRF3401 · ads-tec Industrial IT DVG-IRF3421

    A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.