Vendor
ads-tec Industrial IT
4 known vulnerabilities.
Products
3 results · Clear filters · Feed
-
High 8.1
ads-tec Industrial IT: Account lockout via non-atomic user creation
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
-
High 8.8
ads-tec Industrial IT: Vertical privilege escalation via configuration table write
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
-
High 8.8
ads-tec Industrial IT: Privilege escalation during configuration import
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.