Description
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ads-tec Industrial IT | DVG-IRF1401 | 2.2.5 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF1421 | 2.2.5 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3401 | 2.2.5 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3421 | 2.2.5 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3801 | 2.2.5 – < 2.3.0 | 2.3.0 |
| ads-tec Industrial IT | DVG-IRF3821 | 2.2.5 – < 2.3.0 | 2.3.0 |
Advisories 2
- VDE-2026-076 ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products CERT@VDE · Jul 28, 2026
- VDE-2026-081 Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities CERT@VDE · Jul 28, 2026