CVE-2025-41743: Sprecher-Automation Sprecon-E-C Firmware
Medium severity, CVSS 4.0. EPSS: 0.1% chance of exploitation in the next 30 days.
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
Affected products
- Sprecher-Automation Sprecon-E-C Firmware: before 9.0 (fixed in 9.0)
- Sprecher-Automation Sprecon-E-P Firmware: before 9.0 (fixed in 9.0)
- Sprecher-Automation Sprecon-E-t3 Firmware: before 9.0 (fixed in 9.0)
Published 2025-12-02. Last modified 2026-09-26.