CVE-2022-4333 — Sprecher: Sprecon maintenance access with hardcoded credentials

Description (CNA)

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Affected (CNA)

Vendor / product	Versions
Sprecher Automation / SPRECON-E CPU PU243x	affected all
Sprecher Automation / SPRECON-E CPU PU244x	affected all
Sprecher Automation / SPRECON-E CPU MC33/34	affected all
Sprecher Automation / SPRECON-E CPU SPRECON-EDIR	affected all

CWE

CWE-798

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf

ADP enrichment

CVE

No English description supplied.

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf

CISA-ADP

No English description supplied.

No references supplied.