Riskcovery

CVE-2026-8072

Insecure generation of SAT access credentials in Ingecon EMS Board

State
Published
Severity
9.2 Critical
Published
May 12, 2026
Updated
May 12, 2026
Reserved
May 7, 2026

Read the record on cve.org

Description

Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.

Scores

CVSSScoreVectorSource
4.09.2 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NINCIBE

Weaknesses

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

ProductVersions
Ingecon Sun EMS BoardIngeteam
  • AAX1055CT and earlierAffected
  • ABU1001_P and earlierAffected
  • ACL1201_B and earlierAffected
  • ACL1200AL and earlierAffected
  • ABH1027_K and earlierAffected
  • ABH1007_Z and earlierAffected
  • ABS1009_L and earlierAffected
  • ABS1005_T and earlierAffected
  • ACB1005_A and earlierAffected
  • AAX1031CN and earlierAffected
  • AAX1055CUNot affected
  • ABU1001_QNot affected
  • ACL1201_CNot affected
  • ACL1200AMNot affected
  • ABH1027_LNot affected
  • ABH1007AANot affected
  • ABS1009_PNot affected
  • ABS1005_UNot affected
  • ACB1005_CNot affected
  • AAX1031CONot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.