Vulnerabilidades de Sprecher-automation
CVEs publicadas que afetam produtos de Sprecher-automation: 3 registro(s), com severidade, exploração e correções.
Sprecon-e-c Firmware 3Sprecon-e-p Firmware 3Sprecon-e-t3 Firmware 3SPRECON-E-C 1SPRECON-E-P 1SPRECON-E-T3 1
CVE-2025-41744
Crítica · 9.1
CWE-1394 02/12/2025
Sprecher Automation: SPRECON-E series has static default key material for TLS connections
Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.
CVE-2025-41743
Média · 4.0
CWE-326 02/12/2025
Sprecher Automation: SPRECON-E series prone to weak encryption of update files
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
CVE-2025-41742
Crítica · 9.8
CWE-1394 02/12/2025
Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.