CVEvulnerability

CVE-2025-41743

4.0 MEDIUM Published 2025-12-02 Modified 2026-09-26 Official page ↗
Status
Analyzed
Published
2025-12-02
Last modified
2026-09-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-326

Description

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Affected configurations

• sprecher-automation sprecon-e-c firmware (< 9.0) • sprecher-automation sprecon-e-p firmware (< 9.0) • sprecher-automation sprecon-e-t3 firmware (< 9.0)

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References