CVE-2025-41744 — Sprecher Automation: SPRECON-E series has static default key material for TLS connections

CVE-2025-41744

Sprecher Automation: SPRECON-E series has static default key material for TLS connections PUBLISHED

Description (CNA)

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
Sprecher Automation / SPRECON-E-C	affected *
Sprecher Automation / SPRECON-E-P	affected *
Sprecher Automation / SPRECON-E-T3	affected *

CWE

CWE-1394

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.