What’s Vulnerable › Vulnerabilities

CVE-2022-4332: Sprecher: Vulnerable firmware verification

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-01 · updated 2026-06-17
• Weakness: CWE-20

Description

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device.

Affected products

• Sprecher-Automation Sprecon-E-C Firmware: all versions
• Sprecher-Automation Sprecon-E-P Dl6-1 Firmware: all versions
• Sprecher-Automation Sprecon-E-P Dq6-1 Firmware: all versions
• Sprecher-Automation Sprecon-E-P Ds6-0 Firmware: all versions
• Sprecher-Automation Sprecon-E-T3 Firmware: all versions
• Sprecher-Automation Sprecon-E-Tc Ax-3110 Firmware: all versions

References

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf
• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf

Get alerted when CVE-2022-4332 or the next vulnerability affects your stack