Skip to content
OpenAdvisories

Vendor

ads-tec Industrial IT

4 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.1

    ads-tec Industrial IT: Account lockout via non-atomic user creation

    Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.

  • High 8.8

    ads-tec Industrial IT: Vertical privilege escalation via configuration table write

    A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.

  • High 8.8

    ads-tec Industrial IT: Privilege escalation during configuration import

    A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.