CVE-2022-4333

Published: Jun 1, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: info@cert.vde.com (Secondary)

Description

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Affected (9)

Products: Sprecher Automation: Sprecon E P Dq6 1 Firmware, Sprecon E P Dl6 1 Firmware, Sprecon E P Ds6 0 Firmware, Sprecon E C Firmware, Sprecon E T3 Firmware, Sprecon E Tc Ax 3110 Firmware, Sprecon E Ap 2200 Firmware, Sprecon E Cp 2131 Firmware, Sprecon E Cp 2330 Firmware

Sprecher Automation

9 products

Sprecon E P Dq6 1 Firmware

Sprecon E P Dl6 1 Firmware

Sprecon E P Ds6 0 Firmware

Sprecon E C Firmware

Sprecon E T3 Firmware

Sprecon E Tc Ax 3110 Firmware

Sprecon E Ap 2200 Firmware

Sprecon E Cp 2131 Firmware

Sprecon E Cp 2330 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E P Dq6 1 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E P Dq6 1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E P Dl6 1 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E P Dl6 1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E P Ds6 0 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E P Ds6 0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E C Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E C	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E T3 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E T3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E Tc Ax 3110 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E Tc Ax 3110	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E Ap 2200 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E Ap 2200	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E Cp 2131 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E Cp 2131	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sprecher Automation Sprecon E Cp 2330 Firmware	All versions

Running on/with	Platform Versions
Sprecher Automation Sprecon E Cp 2330	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf

Source: info@cert.vde.com

Vendor Advisory

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.