VulnSocial

CVE-2025-41742Patch(sprecher-automation / sprecon-e-c)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch sprecher-automation sprecon-e-c systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

sprecher-automation CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1394

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sprecon-e-c
  • sprecon-e-c_firmware
  • sprecon-e-p
  • sprecon-e-p_firmware

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
sprecher-automation
Products
sprecon-e-csprecon-e-c_firmwaresprecon-e-psprecon-e-p_firmwaresprecon-e-t3sprecon-e-t3_firmware

1 version affected across 6 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-22: 1Mentions · 2026-06-17: 1Patch / Workaround · 2026-05-22: 1Technical Details · 2026-05-22: 105-2206-17
Signal classification2 categories
Patch
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-221
Patch1
2026-06-171
Disclosure1
Full discourse2 posts
  • Autumn Good@autumn_good_35
    Disclosure

    CVE-2022-4333, CVE-2022-4332, CVE-2025-41741, CVE-2025-41742, CVE-2025-41743, CVE-2025-41744 Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3 https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-sprecher-automation-sprecon-e-c-e-p-e-t3/

    Post summary

    An advisory announces several critical vulnerabilities (CVE-2022-4333, CVE-2022-4332, CVE-2025-41741 to CVE-2025-41744) affecting Sprecher Automation SPRECON products, but no PoC, exploit, or patch information is provided in the snippet.

    00000255
    6.9K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2025-41742 - Critical auth bypass in Sprecher Automations SPRECON-E-C/P/T3. Default crypto keys allow remote read, modify, write access. CVSS 9.8. No patch available. Isolate affected systems immediately. #CVE #ICS #cybersecurity #Devsecops More: https://www.valtersit.com/cve/CVE-2025-41742/

    Post summary

    CVE‑2025‑41742 is a critical authentication bypass in Sprecher Automations equipment that allows remote read/write via default crypto keys; no patch exists, so affected systems should be isolated immediately.

    00000738
    904 followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
HWsprecher-automationsprecon-e-c---
OSsprecher-automationsprecon-e-c_firmware---
HWsprecher-automationsprecon-e-p---
OSsprecher-automationsprecon-e-p_firmware---
HWsprecher-automationsprecon-e-t3---
OSsprecher-automationsprecon-e-t3_firmware---

Explore more

Back to dashboardsprecher-automation CVEssprecon-e-c vulnerabilities