CVE-2025-41743

Katalog CVE

CVSS 4.0 · Medium EPSS 0,07%

Kerentanan Inadequate Encryption Strength pada sprecher-automation sprecon-e-c firmware, sprecher-automation sprecon-e-p firmware +1 lainnya. Skor CVSS 3.1 4.0 (Medium) menurut cert.vde.com.

Deskripsi (NVD)

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Rincian

Terbit di NVD

2 Desember 2025

Terakhir diubah

26 September 2026

Status NVD

Analyzed

CVSS 3.1

4.0 (Medium), sumber cert.vde.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-326: Inadequate Encryption Strength

EPSS (30 hari)

0,07% peluang dieksploitasi; lebih tinggi dari 0,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf advisory vendor