Cryptographic Key Vulnerability in Sprecher Automations SPRECON-E Series
CVE-2025-41744

9.1CRITICAL

Key Information:

Vendor

Sprecher Automation

Status
Sprecon-e-c
Sprecon-e-p
Sprecon-e-t3
Vendor
CVE Published:
2 December 2025

What is CVE-2025-41744?

The SPRECON-E series by Sprecher Automations is compromised due to the use of default cryptographic keys. This vulnerability allows unauthorized remote attackers to intercept and decrypt all communications, leading to potential breaches of confidentiality and integrity. Users are urged to change default keys and implement robust security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

SPRECON-E-C *

SPRECON-E-P *

SPRECON-E-T3 *

References

https://www.sprecher-automation.com/fileadmin/itSecurity/...
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sec-Consult Security Labs
.