critical9.8
CVE-2022-4333
Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device.
Impact
Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sprecher-Automation | Sprecon-E-P Dq6-1 Firmware | All versions |
| Sprecher-Automation | Sprecon-E-P Dl6-1 Firmware | All versions |
| Sprecher-Automation | Sprecon-E-P Ds6-0 Firmware | All versions |
| Sprecher-Automation | Sprecon-E-C Firmware | All versions |
| Sprecher-Automation | Sprecon-E-T3 Firmware | All versions |
| Sprecher-Automation | Sprecon-E-Tc Ax-3110 Firmware | All versions |
| Sprecher-Automation | Sprecon-E Ap-2200 Firmware | All versions |
| Sprecher-Automation | Sprecon-E Cp-2131 Firmware | All versions |
| Sprecher-Automation | Sprecon-E Cp-2330 Firmware | All versions |