This vulnerability involves the insecure generation of credentials in the local SAT access feature of the Ingecon Sun EMS Board. The root cause is the use of a broken or risky cryptographic algorithm (weak hashing) to create secret access credentials. This weakness could allow an attacker to escalate privileges by compromising these credentials. The CVSS 4.0 vector indicates network attack vector with high impact on confidentiality, integrity, and availability, but requiring high attack complexity and no user interaction.

If exploited, an attacker could escalate privileges on the affected device by leveraging the weak cryptographic scheme used for secret credential generation. This could lead to unauthorized access to sensitive functions or data within the Ingecon Sun EMS Board. The critical CVSS score reflects the potential for severe impact on device security and operational integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published by Ingeteam. Users should monitor vendor communications for updates and consider restricting network access to the affected device's SAT functionality until a fix is available.