CyberSecBulletin

Sprecher-automation vulnerabilities

We track 3 vulnerabilities in Sprecher-automation products across 17 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 2, 2025.

3vulnerabilities
3critical
0high
0exploited
9.6average CVSS score

Latest Sprecher-automation vulnerabilities

  • 9.1 Critical severity

    SPRECON-E-C: Use of Default Cryptographic Key

    CVE-2025-41744Sprecher-automation

    Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

  • 9.8 Critical severity

    SPRECON-E-C: Use of Default Cryptographic Key

    CVE-2025-41742Sprecher-automation

    Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any devi

  • 9.8 Critical severity

    SPRECON-E CPU PU243x: Use of Hard-coded Credentials

    CVE-2022-4333Sprecher-automation

    Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.