← All Advisories

CVE-2026-14169

Last refreshed2026-10-06

Status: UPDATED  |  Advisory ID: CVE-2026-14169

Key Details

CVECVE-2026-14169
CVSS Score / Version8.1 (High) / CVSS v3.1
Updated2026-07-30
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is high.
Affected productssee table below
Classified asCWE-696 (Incorrect Behavior Order)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
ads-tec Industrial ITDVG-IRF1401
ads-tec Industrial ITDVG-IRF1421
ads-tec Industrial ITDVG-IRF3401
ads-tec Industrial ITDVG-IRF3421
ads-tec Industrial ITDVG-IRF3801
ads-tec Industrial ITDVG-IRF3821
SubsystemsGeneral OT
SectorsMultiple

What to Know

Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device.

What to Do

Monitor ads-tec Industrial IT's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-14169
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-14169