Description
Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ingeteam Ingecon Sun EMS Board
Default version status: unaffected
0 to ≤ AAX1055CTaffected0 to ≤ ABU1001_Paffected0 to ≤ ACL1201_Baffected0 to ≤ ACL1200ALaffected0 to ≤ ABH1027_Kaffected0 to ≤ ABH1007_Zaffected0 to ≤ ABS1009_Laffected0 to ≤ ABS1005_Taffected0 to ≤ ACB1005_Aaffected0 to ≤ AAX1031CNaffectedAAX1055CUunaffectedABU1001_QunaffectedACL1201_CunaffectedACL1200AMunaffectedABH1027_LunaffectedABH1007AAunaffectedABS1009_PunaffectedABS1005_UunaffectedACB1005_CunaffectedAAX1031COunaffected