Read the docs
TI-2017-14080 Aliases CVE-2017-20007GHSA-4hm5-q7h9-438p

Information Exposure in INGEPAC DA AU

Priority LOW 26CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this vulnerability in order to obtain different configuration files.

Why it matters now

EPSS 0.01119 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IngeteamINGEPAC DA AUAUC_1.13.0.28 – AUC_1.13.0.28—No fix listedCNA
  • INGEPAC DA AU VendorIngeteam Affected AUC_1.13.0.28 – AUC_1.13.0.28 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:ingeteam:ingepac_da_au_firmware:*:*:*:*:*:*:*:*up to auc_1.13.0.28VulnerableIngeteam
cpe:2.3:h:ingeteam:ingepac_da_au:-:*:*:*:*:*:*:*not specified by NVDRunning onIngeteam
  • cpe:2.3:o:ingeteam:ingepac_da_au_firmware:*:*:*:*:*:*:*:* Versions up to auc_1.13.0.28 Vulnerable ·Ingeteam
  • cpe:2.3:h:ingeteam:ingepac_da_au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ingeteam

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-20007
  2. 2026-10-03 Alias added: GHSA-4hm5-q7h9-438p

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences