4
CVE-2025-41743
- EPSS 0.06%
- Veröffentlicht 02.12.2025 10:38:51
- Zuletzt bearbeitet 23.02.2026 17:16:10
- Quelle info@cert.vde.com
- CVE-Watchlists
- Unerledigt
Sprecher Automation: SPRECON-E series prone to weak encryption of update files
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sprecher-automation ≫ Sprecon-e-c Firmware Version < 9.0
Sprecher-automation ≫ Sprecon-e-p Firmware Version < 9.0
Sprecher-automation ≫ Sprecon-e-t3 Firmware Version < 9.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| info@cert.vde.com | 4 | 2.5 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511043_de.pdf