CVE-2025-41743

4.0 mediumEPSS 0.07%

Medium (4.0) in sprecher-automation. EPSS 0.07% chance of exploitation in the next 30 days.

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Severity

CVSS 3.1

4.0 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.07% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2025-12-02
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

sprecher-automation:sprecon-e-c_firmware
sprecher-automation:sprecon-e-p_firmware
sprecher-automation:sprecon-e-t3_firmware

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf

Check your stack JSON