Information Exposure in INGEPAC DA AU
Vulnerability Description
Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an attacker to execute more sophisticated attacks. An unauthenticated remote attacker with access to the device´s web service could exploit this vulnerability in order to obtain different configuration files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-20007
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Industrial Cybersecurity team of S21sec, special mention to Jacinto Moral Matellán.
References
Affected Vendor
Ingeteam
View all reports →