Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-41744

Sprecher Automation: SPRECON-E series has static default key material for TLS connections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sprecher Automation SPRECON-E-C

Default version status: unaffected

  • *affected

Sprecher Automation SPRECON-E-P

Default version status: unaffected

  • *affected

Sprecher Automation SPRECON-E-T3

Default version status: unaffected

  • *affected

References