CVE-2025-41743 Sprecher Automation: SPRECON-E series prone to weak encryption of update files
A local unprivileged attacker can extract limited architectural information from update images due to insufficient encryption strength in SPRECON-E devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41743?
CVE-2025-41743 is a medium-severity vulnerability in Sprecher Automation SPRECON-E-C, published on 2 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
Weakness: CWE-326
Which versions are affected by CVE-2025-41743?
It affects 3 products.
Products include Sprecher-Automation Sprecon-E-C Firmware, Sprecher-Automation Sprecon-E-P Firmware, Sprecher-Automation Sprecon-E-T3 Firmware.
How do I fix CVE-2025-41743?
No fix has been published for CVE-2025-41743 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-41743 being exploited?
There is no known exploitation of CVE-2025-41743 in the wild and no public exploit code.
Other vulnerabilities in Sprecher Automation SPRECON-E-C
- CVE-2025-41742 Hardcoded credentials in SPRECON-E-C
- CVE-2022-4333 Sprecher: Sprecon maintenance access with hardcoded credentials
- CVE-2025-41744 Sprecher Automation: SPRECON-E series has static default key material for TLS connections
- CVE-2022-4332 Sprecher: Vulnerable firmware verification
- CVE-2024-6758 Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E
Sources
Also known as GHSA-v2x4-9r4m-m784.