CVE-2025-41744

Katalog CVE

CVSS 9.1 · Critical EPSS 0,41%

Kerentanan Use of Default Cryptographic Key pada sprecher-automation sprecon-e-c firmware, sprecher-automation sprecon-e-p firmware +1 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut cert.vde.com.

Deskripsi (NVD)

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Rincian

Terbit di NVD

2 Desember 2025

Terakhir diubah

26 September 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber cert.vde.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1394: Use of Default Cryptographic Key

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf advisory vendor