Riskcovery

CVE-2022-4333

Sprecher: Sprecon maintenance access with hardcoded credentials

State
Published
Severity
9.8 Critical
Published
Jun 1, 2023
Updated
Jan 10, 2025
Reserved
Dec 7, 2022

Read the record on cve.org

Description

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
SPRECON-E CPU PU243xSprecher Automation
  • allAffected
SPRECON-E CPU PU244xSprecher Automation
  • allAffected
SPRECON-E CPU MC33/34Sprecher Automation
  • allAffected
SPRECON-E CPU SPRECON-EDIRSprecher Automation
  • allAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.