Sprecher Automation

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sprecher Automation records in CISA KEV

No Sprecher Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sprecon-e-c Firmware 6 records MEDIUM Sprecon-e-t3 Firmware 6 records MEDIUM Sprecon-e-p Dl6-1 Firmware 3 records MEDIUM Sprecon-e-p Dq6-1 Firmware 3 records MEDIUM Sprecon-e-p Ds6-0 Firmware 3 records MEDIUM Sprecon-e-p Firmware 3 records MEDIUM Sprecon-e-tc Ax-3110 Firmware 2 records MEDIUM Sprecon-e Ap-2200 Firmware 2 records MEDIUM

Records

8 records

TI-2022-03968 CVE-2022-4333 · GHSA-539f-5h6r-p5pf

Sprecher: Sprecon maintenance access with hardcoded credentials

MEDIUM 50

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00858 Published 2023-06-01 No fix listed CWE-798

TI-2025-27702 CVE-2025-41742 · GHSA-qx6m-hh7f-72hf

Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of…

MEDIUM 49

Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00496 Published 2025-12-02 No fix listed CWE-1394

TI-2025-27704 CVE-2025-41744 · GHSA-697w-w949-fhm4

Sprecher Automation: SPRECON-E series has static default key material for TLS connections

MEDIUM 48

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00438 Published 2025-12-02 No fix listed CWE-1394

TI-2016-08125 CVE-2016-10041 · GHSA-h78p-6x92-8qgr

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0.

LOW 35

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01085 Published 2016-12-25 No fix listed CWE-264

TI-2022-03967 CVE-2022-4332 · GHSA-73v7-m7qm-qq9g

Sprecher: Vulnerable firmware verification

LOW 32

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00338 Published 2023-06-01 No fix listed CWE-20

TI-2020-09220 CVE-2020-11496 · GHSA-xw7r-78c6-fpj4

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to…

LOW 30

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00343 Published 2020-10-19 No fix listed CWE-20

TI-2024-06265 CVE-2024-6758 · GHSA-6222-m4w2-vpjj

Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

LOW 29

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0044 Published 2024-08-12 Fixed in < 8.71j CWE-266

TI-2025-27703 CVE-2025-41743 · GHSA-v2x4-9r4m-m784

Sprecher Automation: SPRECON-E series prone to weak encryption of update files

LOW 17

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the arc…

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00075 Published 2025-12-02 Fixed in 9.0 CWE-326

Open these records in search →

Critical	3
High	1
Medium	4
Low	0
No CVSS	0