Read the docs

Ingeteam

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ingeteam records in CISA KEV

No Ingeteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 47

Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00152 Published 2026-05-12 Fixed in AAX1055CU, ABU1001_Q +8 CWE-327
TI-2023-03522 CVE-2023-3769 · GHSA-vr3w-m9pf-xx47

Vulnerability in Ingeteam's INGEPAC EF

Priority MEDIUM 44

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would cr…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00665 Published 2023-10-02 No fix listed CWE-20
TI-2023-03521 CVE-2023-3768 · GHSA-h494-92qw-27m3

Vulnerability in Ingeteam's INGEPAC EF/DA

Priority LOW 38

Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would cr…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00665 Published 2023-10-02 No fix listed CWE-20
TI-2023-03523 CVE-2023-3770 · GHSA-qrqm-2w5p-mvv2

Vulnerability in Ingeteam's INGEPAC DA

Priority LOW 30

Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the affected device is located to use the discovery port protocol (1925/UDP) to obtain device-specific info…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00421 Published 2023-10-02 No fix listed CWE-20
TI-2017-14080 CVE-2017-20007 · GHSA-4hm5-q7h9-438p

Information Exposure in INGEPAC DA AU

Priority LOW 26

Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01119 Published 2021-10-25 No fix listed CWE-200
Open these records in search →