NetSight
IP …
medium4.0

CVE-2025-41743

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from up…

Impact

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Affected products

VendorProductAffected versions
Sprecher-AutomationSprecon-E-C Firmware
before 9.0
Sprecher-AutomationSprecon-E-P Firmware
before 9.0
Sprecher-AutomationSprecon-E-T3 Firmware
before 9.0

Weakness classification

CWE-326

References