Description (CNA)
Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ingeteam / Ingecon Sun EMS Board | affected 0 through AAX1055CT; affected 0 through ABU1001_P; affected 0 through ACL1201_B; affected 0 through ACL1200AL; affected 0 through ABH1027_K; affected 0 through ABH1007_Z; affected 0 through ABS1009_L; affected 0 through ABS1005_T; affected 0 through ACB1005_A; affected 0 through AAX1031CN; unaffected AAX1055CU; unaffected ABU1001_Q; unaffected ACL1201_C; unaffected ACL1200AM; unaffected ABH1027_L; unaffected ABH1007AA; unaffected ABS1009_P; unaffected ABS1005_U; unaffected ACB1005_C; unaffected AAX1031CO |
CWE
CWE-327
References
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/insecure-generation-sat-access-credentials-ingecon-ems-board
- https://www.reversemode.com/2026/05/a-practical-analysis-of-cyber-physical.html
ADP enrichment
No English description supplied.
No references supplied.