Insecure generation of SAT access credentials in Ingecon EMS Board
Priority MEDIUM 47CWE-327Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-327.
Summary
Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00152 4th percentileScored 2026-11-07
Fix Fixed Ingecon Sun EMS Board (Ingeteam): AAX1055CU, ABU1001_Q, ACL1201_C +7
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Ingeteam | Ingecon Sun EMS Board | up to AAX1055CT; up to ABU1001_P; up to ACL1201_B; up to ACL1200AL; up to ABH1027_K; up to ABH1007_Z; up to ABS1009_L; up to ABS1005_T; up to ACB1005_A; up to AAX1031CN | AAX1055CU, ABU1001_Q, ACL1201_C, ACL1200AM, ABH1027_L, ABH1007AA, ABS1009_P, ABS1005_U, ACB1005_C, AAX1031CO | Patch available | CNA |
- Ingecon Sun EMS Board VendorIngeteam Affected up to AAX1055CT; up to ABU1001_P; up to ACL1201_B; up to ACL1200AL; up to ABH1027_K; up to ABH1007_Z; up to ABS1009_L; up to ABS1005_T; up to ACB1005_A; up to AAX1031CN Fixed in AAX1055CU, ABU1001_Q, ACL1201_C, ACL1200AM, ABH1027_L, ABH1007AA, ABS1009_P, ABS1005_U, ACB1005_C, AAX1031CO Patch available CNA
Remediation
- Fix · CNA Ingecon Sun EMS Board (Ingeteam) Fixed in AAX1055CU, ABU1001_Q, ACL1201_C, ACL1200AM, ABH1027_L, ABH1007AA, ABS1009_P, ABS1005_U, ACB1005_C, AAX1031CO
Timeline
- 2026-10-02 Threatist record created from CVE-2026-8072
- 2026-10-03 Alias added: GHSA-4h3h-6vxm-m4vr
References
More Ingeteam vulnerabilities
- TI-2023-03522 Vulnerability in Ingeteam's INGEPAC EF CVSS 3.1HIGH 8.6
- TI-2023-03521 Vulnerability in Ingeteam's INGEPAC EF/DA CVSS 3.1HIGH 8.6
- TI-2023-03523 Vulnerability in Ingeteam's INGEPAC DA CVSS 3.1MEDIUM 5.3
- TI-2017-14080 Information Exposure in INGEPAC DA AU CVSS 3.1MEDIUM 5.3
Sources
- CVE-2026-8072 · CVE Program
- CVE-2026-8072 · NVD
- FIRST EPSS
- GHSA-4h3h-6vxm-m4vr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences