CVE-2025-41744

9.1 criticalEPSS 0.4%

Critical (9.1) in sprecher-automation. EPSS 0.4% chance of exploitation in the next 30 days.

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-1394
Published: 2025-12-02
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

sprecher-automation:sprecon-e-c_firmware
sprecher-automation:sprecon-e-p_firmware
sprecher-automation:sprecon-e-t3_firmware

References

https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf

Check your stack JSON