DVG-IRF3801 vulnerabilities
3 known vulnerabilities in DVG-IRF3801 from ads-tec Industrial IT. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
DVG-IRF1401: Incorrect Behavior Order
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.
- 8.8 High severity
DVG-IRF1401: Missing Authorization
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access.
- 8.8 High severity
DVG-IRF1401: Incorrect Authorization
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization.