Threats tagged 'ads-tec-industrial-it-gmbh'

A vulnerability in ads-tec Industrial IT IRF products and web terminals allows an unauthenticated remote attacker with network access to the web interface to exhaust the PHP memory limit via crafted HTTP requests. This causes the PHP worker process to become unavailable, resulting in denial of service of the web interface. The impact is limited to availability; confidentiality and integrity are not affected. On IRF2000 firmware prior to 5.0.0, HTTP digest authentication protects the PHP interface, limiting exploitation to authenticated users.