Vulnerabilities

TI-2024-06265 CVE-2024-6758 · GHSA-6222-m4w2-vpjj

Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

LOW 29

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0044 Published 2024-08-12 Fixed in < 8.71j CWE-266

TI-2022-03967 CVE-2022-4332 · GHSA-73v7-m7qm-qq9g

Sprecher: Vulnerable firmware verification

LOW 32

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00338 Published 2023-06-01 No fix listed CWE-20

TI-2022-03968 CVE-2022-4333 · GHSA-539f-5h6r-p5pf

Sprecher: Sprecon maintenance access with hardcoded credentials

MEDIUM 50

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00858 Published 2023-06-01 No fix listed CWE-798

Vulnerabilities

Filters

Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

Sprecher: Vulnerable firmware verification

Sprecher: Sprecon maintenance access with hardcoded credentials