CVE-2026-14167 — ads-tec Industrial IT: Privilege escalation during configuration import

CVE-2026-14167

ads-tec Industrial IT: Privilege escalation during configuration import PUBLISHED

Description (CNA)

A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.

Affected (CNA)

Vendor / product	Versions
ads-tec Industrial IT / DVG-IRF1401	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF1421	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3401	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3421	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3801	affected 1.0.0 before 2.3.0
ads-tec Industrial IT / DVG-IRF3821	affected 1.0.0 before 2.3.0

CWE

CWE-863

References

https://www.certvde.com/en/advisories/VDE-2026-076/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.