Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2017-20007

Information Exposure in INGEPAC DA AU

Description

Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this vulnerability in order to obtain different configuration files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ingeteam INGEPAC DA AU

  • AUC_1.13.0.28 to ≤ AUC_1.13.0.28affected

References