CVE-2025-41742 — Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in sys…

CVE-2025-41742

Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components PUBLISHED

Description (CNA)

Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

Affected (CNA)

Vendor / product	Versions
Sprecher Automation / SPRECON-E-C	affected *
Sprecher Automation / SPRECON-E-P	affected *
Sprecher Automation / SPRECON-E-T3	affected *

CWE

CWE-1394

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511042_de.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.