This vulnerability (CWE-862) in ads-tec Industrial IT DVG-IRF1401 version 1.0.0 arises from missing authorization controls on the insert path of the configuration table. A remote attacker with low privileges can exploit this flaw to escalate their privileges to administrator level, thereby gaining full control over the system. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required.

Successful exploitation grants an attacker full system access with administrator privileges, compromising confidentiality, integrity, and availability of the affected device. This could lead to unauthorized configuration changes, disruption of industrial processes, or further network compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Until a patch is available, restrict network access to the affected device and monitor for unauthorized configuration changes.