This vulnerability involves the insecure generation of credentials in the local Technical Support (SAT) access functionality of the Ingecon Sun EMS Board. The secret access credentials rely on a weak hashing algorithm, classified under CWE-327 (Use of a Broken or Risky Cryptographic Algorithm). This cryptographic weakness could enable an attacker to perform privilege escalation on the affected device. The CVSS 4.0 vector indicates the attack requires network access with high complexity and no user interaction, and it results in high impact on confidentiality, integrity, and availability. No patch or official remediation level has been provided by Ingeteam as of the publication date.

The vulnerability allows an attacker to escalate privileges on the Ingecon Sun EMS Board by exploiting weak cryptographic credential generation. This could compromise the confidentiality, integrity, and availability of the device's local Technical Support access. Given the critical CVSS score of 9.2, successful exploitation could lead to significant control over the affected system. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published by Ingeteam, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the device and limiting local SAT access may reduce exposure.