BaseFortify

Publication date: 2025-12-02

Last updated on: 2026-02-23

Assigner: CERT VDE

Description

Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-02

Last Modified

2026-02-23

Generated

2026-07-06

AI Q&A

2025-12-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-41744

EUVD

EUVD-2025-200222

Affected Vendors & Products

Vendor	Product	Version / Range
sprecher-automation	sprecon-e-c_firmware	*
sprecher-automation	sprecon-e-p_firmware	*
sprecher-automation	sprecon-e-t3_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1394	The product uses a default cryptographic key for potentially critical functionality.

Attack-Flow Graph

Executive Summary

This vulnerability exists because the Sprecher Automations SPRECON-E series uses default cryptographic keys. An unprivileged remote attacker can exploit this to access all encrypted communications, compromising their confidentiality and integrity.

Impact Analysis

The vulnerability can allow an attacker to intercept and access sensitive encrypted communications without authorization, leading to a loss of confidentiality and integrity of data. This could result in exposure of sensitive information and potential manipulation of communications.

Hi! I’m here to help you understand CVE-2025-41744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70