Skip to main content

Sprecon E C Firmware CVE-2024-6758

MEDIUM
Incorrect Privilege Assignment (CWE-266)
2024-08-12 info@cert.vde.com
Authentication Bypass Sprecon E C Firmware Sprecon E T3 Firmware Sprecon E P Dq6 1 Firmware Sprecon E P Dl6 1 Firmware Sprecon E P Ds6 0 Firmware Sprecon E Ap 2200 Firmware Sprecon E Cp 2131 Firmware Sprecon E Cp 2330 Firmware Sprecon E Cp 2500 Firmware Sprecon E P Dd6 2 Firmware Sprecon Edir Firmware Sprecon E T3 Ax 3110 Firmware Sprecher Automation
6.5
CVSS 3.1 · Vendor: cert
Share

Severity by source

Vendor (cert) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from Vendor (cert) · only source for this CVE.

CVSS VectorVendor: cert

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 12, 2024 - 13:38 cve.org
MEDIUM 6.5

DescriptionCVE.org

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.

AnalysisAI

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-266. Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments. Affected products include: Sprecher-Automation Sprecon-E Cp-2500 Firmware, Sprecher-Automation Sprecon-E-P Dd6-2 Firmware, Sprecher-Automation Sprecon-E-C Firmware, Sprecher-Automation Sprecon-E Ap-2200 Firmware, Sprecher-Automation Sprecon-E Cp-2131 Firmware. Version information: version 8.71.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Sprecon E C Firmware

View all
CVE-2025-41742 CRITICAL
9.8 Dec 02

CVE-2025-41742 is a security vulnerability (CVSS 9.8) that allows the attacker. Critical severity with potential for sig
CVE-2025-41744 CRITICAL
9.1 Dec 02

CVE-2025-41744 is a security vulnerability (CVSS 9.1) that allows an unprivileged remote attacker. Critical severity wit
CVE-2025-41743 MEDIUM
4.0 Dec 02

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unpriv

Same weakness CWE-266 – Incorrect Privilege Assignment

View all
CVE-2025-27007 CRITICAL POC
9.8
CVE-2024-28000 CRITICAL POC
9.8
CVE-2026-48172 CRITICAL POC
10.0
CVE-2024-24882 CRITICAL POC
9.8
CVE-2025-47539 CRITICAL POC
9.8
CVE-2022-20759 HIGH POC
8.8
CVE-2024-54363 CRITICAL
9.8
CVE-2026-23550 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2024-6758 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy