---
cve: "CVE-2025-41742"
severity: "CRITICAL"
cvss: 9.8
epss: "45%"
vendor: "Sprecher Automation"
kev: false
exploited: false
published: "2025-12-02 11:15:51"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-14T08:38:45+02:00"
---

# CVE-2025-41742

> 9.8 CRITICAL

## Beschreibung

Sprecher Automations SPRECON-E-C,  SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/SPR-2511042_de.pdf>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-41742) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_