CVE-2025-41744

critical · 9.1

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

9.1

CVSS

0.4%

EPSS (exploit prob.)

35th

EPSS percentile

2025-12-02

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-1394

Affected products

Vendor	Product	Affected versions
sprecher-automation	sprecon-e-c_firmware	all versions
sprecher-automation	sprecon-e-c	all versions
sprecher-automation	sprecon-e-p_firmware	all versions
sprecher-automation	sprecon-e-p	all versions
sprecher-automation	sprecon-e-t3_firmware	all versions
sprecher-automation	sprecon-e-t3	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-41744