What’s Vulnerable › Vulnerabilities

CVE-2025-41742: Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-02 · updated 2026-09-26
• Weakness: CWE-1394

Description

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

Affected products

• Sprecher-Automation Sprecon-E-C Firmware: all versions
• Sprecher-Automation Sprecon-E-P Firmware: all versions
• Sprecher-Automation Sprecon-E-T3 Firmware: all versions

References

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511042_de.pdf

Get alerted when CVE-2025-41742 or the next vulnerability affects your stack