Description
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ads-tec Industrial IT | DVG-IRF1401 | 1.0.0 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF1421 | 1.0.0 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3401 | 1.0.0 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3421 | 1.0.0 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3801 | 1.0.0 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3821 | 1.0.0 – < 2.3.0 | 2.3.0 |
Advisories 2
- VDE-2026-076 ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products CERT@VDE · Jul 28, 2026
- VDE-2026-081 Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities CERT@VDE · Jul 28, 2026