Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-41744 EUVD-2025-200222GHSA-697w-w949-fhm4

Sprecher Automation: SPRECON-E series has static default key material for TLS connections

Published Dec 2, 2025 · Updated Dec 2, 2025 · Assigned by CERTVDE

Description

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

Affected products

VendorProductAffectedFixed
Sprecher Automation SPRECON-E-C — —
Sprecher Automation SPRECON-E-P — —
Sprecher Automation SPRECON-E-T3 — —

References