CVE-2025-41743
MEDIUMDescription
Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sprecher-automation | sprecon-e-c_firmware |
| sprecher-automation | sprecon-e-c |
| sprecher-automation | sprecon-e-p_firmware |
| sprecher-automation | sprecon-e-p |
| sprecher-automation | sprecon-e-t3_firmware |
| sprecher-automation | sprecon-e-t3 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-41743? +
How severe is CVE-2025-41743? +
What products are affected by CVE-2025-41743? +
How do I check if I'm vulnerable to CVE-2025-41743? +
Related Vulnerabilities
A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The …
The use of a weak cryptographic key pair in the signature verification process in WPS Office (Kingsoft) on Windows allows …
Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may …
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: …
Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET …
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .