Vulnerabilidades de ads-tec Industrial IT
CVEs publicadas que afetam produtos de ads-tec Industrial IT: 4 registro(s), com severidade, exploração e correções.
CVE-2026-14171
Média · 6.1
CWE-601 28/07/2026
ads-tec Industrial IT: Post-login open redirect in the web interface
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability.
CVE-2026-14169
Alta · 8.1
CWE-696 28/07/2026
ads-tec Industrial IT: Account lockout via non-atomic user creation
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
CVE-2026-14168
Alta · 8.8
CWE-862 28/07/2026
ads-tec Industrial IT: Vertical privilege escalation via configuration table write
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
CVE-2026-14167
Alta · 8.8
CWE-863 28/07/2026
ads-tec Industrial IT: Privilege escalation during configuration import
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.