Sprecher: Vulnerable firmware verification
CVE-2022-4332

6.8MEDIUM

Key Information:

Vendor

Sprecher Automation

Status
Sprecon-e-c/p/t3 Cpu Pu244x
Vendor
CVE Published:
1 June 2023

What is CVE-2022-4332?

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device.

Affected Version(s)

SPRECON-E-C/P/T3 CPU PU244x all

References

https://www.sprecher-automation.com/fileadmin/itSecurity/...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.