Vulnerability · Published Dec 2, 2025 · Assigned by CERTVDE
CVE-2025-41742Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
Critical 9.8
In plain English
A critical-severity security flaw in SPRECON-E-C from Sprecher Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 57.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sprecher Automation | SPRECON-E-C | * |
| Sprecher Automation | SPRECON-E-P | * |
| Sprecher Automation | SPRECON-E-T3 | * |
Weakness: CWE-1394 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H