by Kastro
Paper/Archive/CVE-2025-41742

CVE-2025-41742

Sprecher Automation SPRECON-E-C — Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.1.401 × 208.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

Affected

ProductAffectedFixed inSource
SPRECON-E-Call versions–CNA
SPRECON-E-Pall versions–CNA
SPRECON-E-T3all versions–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorysprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511042_de.pdf