What’s Vulnerable › Vulnerabilities

CVE-2024-6758: Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-12 · updated 2026-06-17
• Weakness: CWE-266

Description

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.

Affected products

• Sprecher-Automation Sprecon-E-C Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-P Dd6-2 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-P Dl6-1 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-P Dq6-1 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-P Ds6-0 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-T3 Ax-3110 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E-T3 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E Ap-2200 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E Cp-2131 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E Cp-2330 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-E Cp-2500 Firmware: before 8.71j — fixed in 8.71j
• Sprecher-Automation Sprecon-Edir Firmware: before 8.71j — fixed in 8.71j

How to fix

Upgrade to a fixed version: Sprecher-Automation Sprecon-E-C Firmware 8.71j; Sprecher-Automation Sprecon-E-P Dd6-2 Firmware 8.71j; Sprecher-Automation Sprecon-E-P Dl6-1 Firmware 8.71j; Sprecher-Automation Sprecon-E-P Dq6-1 Firmware 8.71j; Sprecher-Automation Sprecon-E-P Ds6-0 Firmware 8.71j; Sprecher-Automation Sprecon-E-T3 Ax-3110 Firmware 8.71j; Sprecher-Automation Sprecon-E-T3 Firmware 8.71j; Sprecher-Automation Sprecon-E Ap-2200 Firmware 8.71j; Sprecher-Automation Sprecon-E Cp-2131 Firmware 8.71j; Sprecher-Automation Sprecon-E Cp-2330 Firmware 8.71j; Sprecher-Automation Sprecon-E Cp-2500 Firmware 8.71j; Sprecher-Automation Sprecon-Edir Firmware 8.71j. Check the vendor advisory for mitigations.

References

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2407171_de.pdf

Get alerted when CVE-2024-6758 or the next vulnerability affects your stack