Authenticated administrator escalation via unchecked configuration insert

Missing authorization in DVG-IRF routers before 2.3.0 allows remote authenticated users to gain administrator privileges. The configuration table's insert path accepts writes from low-privileged accounts without an authorization check, enabling administrator-level configuration access. Reachability requires a valid low-privilege account and network access to the proprietary configuration interface; exploitation grants full device control.