Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-4333

Sprecher: Sprecon maintenance access with hardcoded credentials

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Sprecher-automation
Products
Sprecon-e-c Sprecon-e-c Firmware Sprecon-e-p Dl6-1 and 15 more
CVE-2022-4332

Sprecher: Vulnerable firmware verification

In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Sprecher-automation
Products
Sprecon-e-c Sprecon-e-c Firmware Sprecon-e-p Dl6-1 and 9 more