Vulnerability · Published May 12, 2026 · Assigned by INCIBE
CVE-2026-8072Insecure generation of SAT access credentials in Ingecon EMS Board
Critical 9.2
In plain English
A critical-severity broken cryptography in Ingecon Sun EMS Board from Ingeteam. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).
Official description
Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ingeteam | Ingecon Sun EMS Board | 0 – through AAX1055CT0 – through ABU1001_P0 – through ACL1201_B0 – through ACL1200AL0 – through ABH1027_K0 – through ABH1007_Z0 – through ABS1009_L0 – through ABS1005_T |
Weakness: CWE-327 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N