Most recent entries from csaf_adstecindustrialitgmbh

VDE-2026-076 — ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

Tue, 28 Jul 2026 10:00:00 +0000

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.

VDE-2025-033 — ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC IRF Products

Mon, 14 Apr 2025 10:00:00 +0000

The ADS-TEC firewall products IRF1000, IRF2000, and IRF3000 include Eclipse Mosquitto, affected by multiple vulnerabilities. Exploitation requires a compromised upstream MQTT broker, limiting direct device exposure.

VDE-2024-016 — ADS-TEC Industrial IT: Docker vulnerability affects multiple products

Mon, 19 Feb 2024 07:00:00 +0000

The affected products and versions present a vulnerability due to a vulnerable integrated software component the docker runc <= 1.1.11. In the worst-case scenario, the integrated Docker container environment could be compromised, potentially enabling the execution of arbitrary code within the Docker environment or neighboring Docker containers if dockerfiles or Docker images from untrusted sources are utilized.

It's crucial to emphasize that while the Docker environment is vulnerable, the host operating system remains unharmed due to its isolation from the Docker environment within the ads-tec products.

Using Docker images or Dockerfiles from untrusted sources poses a risk. This advice is especially pertinent for Docker use in productive operational technology (OT) environments, and it's our expectation that our customers adhere strictly to this guidance anyway.

VDE-2023-009 — ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000

Mon, 08 May 2023 13:37:00 +0000

VDE-2023-009