Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-4333

Sprecher: Sprecon maintenance access with hardcoded credentials

Description

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sprecher Automation SPRECON-E CPU PU243x

Default version status: unaffected

  • allaffected

Sprecher Automation SPRECON-E CPU PU244x

Default version status: unaffected

  • allaffected

Sprecher Automation SPRECON-E CPU MC33/34

Default version status: unaffected

  • allaffected

Sprecher Automation SPRECON-E CPU SPRECON-EDIR

Default version status: unaffected

  • allaffected

References