Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2025-41743

Sprecher Automation: SPRECON-E series prone to weak encryption of update files

Description

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sprecher Automation SPRECON-E-C

Default version status: unaffected

  • 1.0 to < 9.0affected

Sprecher Automation SPRECON-E-P

Default version status: unaffected

  • 1.0 to < 9.0affected

Sprecher Automation SPRECON-E-T3

Default version status: unaffected

  • 1.0 to < 9.0affected

References