CVE-2025-41742
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Sprecher Automation | SPRECON-E-C | * | affected |
| Sprecher Automation | SPRECON-E-P | * | affected |
| Sprecher Automation | SPRECON-E-T3 | * | affected |
Weaknesses
- CWE-1394: CWE-1394 Use of Default Cryptographic Key
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.