Sprecher-automation Sprecon-e-c Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Sprecher-automation Sprecon-e-c Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-4333 — CVSS 9.8 (critical): Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These…
• CVE-2025-41742 — CVSS 9.8 (critical): Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default…
• CVE-2025-41744 — CVSS 9.1 (critical): Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted…
• CVE-2022-4332 — CVSS 6.8 (medium): In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical…
• CVE-2024-6758 — CVSS 6.5 (medium): Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save…
• CVE-2025-41743 — CVSS 4.0 (medium): Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to…