CVE-2025-41742

Katalog CVE

CVSS 9.8 · Critical EPSS 0,46%

Kerentanan Use of Default Cryptographic Key pada sprecher-automation sprecon-e-c firmware, sprecher-automation sprecon-e-p firmware +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut cert.vde.com.

Deskripsi (NVD)

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

Rincian

Terbit di NVD

2 Desember 2025

Terakhir diubah

26 September 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber cert.vde.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1394: Use of Default Cryptographic Key

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 38,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511042_de.pdf advisory vendor