ads-tec Industrial IT vulnerabilities
Published CVEs affecting ads-tec Industrial IT products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-14171
Medium · 6.1
CWE-601 Jul 28, 2026
ads-tec Industrial IT: Post-login open redirect in the web interface
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
CVE-2026-14169
High · 8.1
CWE-696 Jul 28, 2026
ads-tec Industrial IT: Account lockout via non-atomic user creation
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
CVE-2026-14168
High · 8.8
CWE-862 Jul 28, 2026
ads-tec Industrial IT: Vertical privilege escalation via configuration table write
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
CVE-2026-14167
High · 8.8
CWE-863 Jul 28, 2026
ads-tec Industrial IT: Privilege escalation during configuration import
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.