Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-41743 EUVD-2025-200221GHSA-v2x4-9r4m-m784

Sprecher Automation: SPRECON-E series prone to weak encryption of update files

Published Dec 2, 2025 · Updated Dec 2, 2025 · Assigned by CERTVDE

Description

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Affected products

VendorProductAffectedFixed
Sprecher Automation SPRECON-E-C 1.0 – < 9.0 9.0
Sprecher Automation SPRECON-E-P 1.0 – < 9.0 9.0
Sprecher Automation SPRECON-E-T3 1.0 – < 9.0 9.0

References