Sprecher-automation vulnerabilities
Published CVEs affecting Sprecher-automation products: 3 record(s), with severity, exploitation and fixes.
Sprecon-e-c Firmware 3Sprecon-e-p Firmware 3Sprecon-e-t3 Firmware 3SPRECON-E-C 1SPRECON-E-P 1SPRECON-E-T3 1
CVE-2025-41744
Critical · 9.1
CWE-1394 Dec 2, 2025
Sprecher Automation: SPRECON-E series has static default key material for TLS connections
Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.
CVE-2025-41743
Medium · 4.0
CWE-326 Dec 2, 2025
Sprecher Automation: SPRECON-E series prone to weak encryption of update files
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
CVE-2025-41742
Critical · 9.8
CWE-1394 Dec 2, 2025
Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.