CVE-2025-41742 Hardcoded credentials in SPRECON-E-C
Unauthorized remote attackers can read, modify, and write data or access devices via remote maintenance due to static cryptographic keys in SPRECON-E controllers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41742?
CVE-2025-41742 is a critical vulnerability in Sprecher Automation SPRECON-E-C, published on 2 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.
Weakness: CWE-1394
Which versions are affected by CVE-2025-41742?
It affects 3 products.
Products include Sprecher-Automation Sprecon-E-C Firmware, Sprecher-Automation Sprecon-E-P Firmware, Sprecher-Automation Sprecon-E-T3 Firmware.
How do I fix CVE-2025-41742?
No fix has been published for CVE-2025-41742 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-41742 being exploited?
There is no known exploitation of CVE-2025-41742 in the wild and no public exploit code.
Other vulnerabilities in Sprecher Automation SPRECON-E-C
- CVE-2022-4333 Sprecher: Sprecon maintenance access with hardcoded credentials
- CVE-2025-41744 Sprecher Automation: SPRECON-E series has static default key material for TLS connections
- CVE-2022-4332 Sprecher: Vulnerable firmware verification
- CVE-2024-6758 Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E
- CVE-2025-41743 Sprecher Automation: SPRECON-E series prone to weak encryption of update files
Sources
Also known as GHSA-qx6m-hh7f-72hf.