Sprecher Automation's vulnerability footprint centers on its SPRECON industrial control and automation product line, including both the E-C and E-T3 controller families and their firmware components. This is a niche vendor whose disclosures reflect the embedded systems and control-logic domain; defenders tracking this vendor should focus inventory and patching efforts on critical operational technology environments where these controllers are deployed. Current vulnerability severity, exploitation activity, and exposure details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sprecher Automation over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-41742CRITICAL Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows | Dec 2, 2025 | 9.8 | 31 | NO | NO |
CVE-2025-41744CRITICAL Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confid | Dec 2, 2025 | 9.1 | 29 | NO | NO |
CVE-2022-4333CRITICAL Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to | Jun 1, 2023 | 9.8 | 27 | NO | NO |
CVE-2016-10041HIGH An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin | Dec 25, 2016 | 7.5 | 25 | NO | NO |
CVE-2020-11496MEDIUM Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input val | Oct 19, 2020 | 6.7 | 22 | NO | NO |
CVE-2022-4332MEDIUM In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker | Jun 1, 2023 | 6.8 | 21 | NO | NO |
CVE-2024-6758MEDIUM Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments. | Aug 12, 2024 | 6.5 | 20 | NO | NO |
CVE-2025-41743MEDIUM Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus | Dec 2, 2025 | 4.0 | 17 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sprecher Automation.
Media articles that mention a CVE ID that affects a product developed by Sprecher Automation — matched by CVE ID, not by vendor name.