CVE-2022-4333: Sprecher-Automation Sprecon-E-C Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Affected products

• Sprecher-Automation Sprecon-E-C Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E-P DL6-1 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E-P DQ6-1 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E-P DS6-0 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E-t3 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E-Tc Ax-3110 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E Ap-2200 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E CP-2131 Firmware: affected versions not specified
• Sprecher-Automation Sprecon-E CP-2330 Firmware: affected versions not specified

Published 2023-06-01. Last modified 2026-06-17.