← Back

CVE-2025-41744

nvd nist
Published: Dec 2, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: info@cert.vde.com (Secondary)

Description

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Affected (3)

Sprecher Automation
3 products
Sprecon E C Firmware
Sprecon E P Firmware
Sprecon E T3 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sprecon E C Firmware
All versions
Running on/withPlatform Versions
Sprecher Automation
Sprecon E C
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sprecon E P Firmware
All versions
Running on/withPlatform Versions
Sprecher Automation
Sprecon E P
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sprecon E T3 Firmware
All versions
Running on/withPlatform Versions
Sprecher Automation
Sprecon E T3
All versions

Related CWEs

CWE-1394
Use of Default Cryptographic Key
The product uses a default cryptographic key for potentially critical functionality.

References (1)

Source: info@cert.vde.com
Vendor Advisory

Timeline

No history available yet.