CVE-2025-41742
Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
- State
- Published
- Severity
- 9.8 Critical
- Published
- Dec 2, 2025
- Updated
- Dec 2, 2025
- Reserved
- Apr 16, 2025
Description
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CERTVDE |
Weaknesses
- CWE-1394 Use of Default Cryptographic Key
Affected Products
| Product | Versions |
|---|---|
SPRECON-E-CSprecher Automation |
|
SPRECON-E-PSprecher Automation |
|
SPRECON-E-T3Sprecher Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.