What is the CVSS score of CVE-2025-41742?

CVE-2025-41742 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Sprecon E C Firmware are affected by CVE-2025-41742?

Sprecher Automation SPRECON industrial control systems are exposed to critical remote compromise via hardcoded default cryptographic keys, allowing unauthorized attackers to read/modify operational…

How to fix or mitigate CVE-2025-41742?

Within 24 hours: Inventory all SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 devices; isolate affected systems from external networks if operationally feasible; enable enhanced logging. Within 7 days: Change all default cryptographic keys and credentials; implement network segmentation to restrict device access; disable remote maintenance features if not operationally critical. Within 30 days: Deploy network-based anomaly detection on OT/ICS segments; conduct forensic review for unauthorized access; establish vendor communication protocol for patch notification.

Sprecon E C Firmware CVE-2025-41742

EUVD-2025-200220 CRITICAL

Use of Default Cryptographic Key (CWE-1394)

2025-12-02 info@cert.vde.com

Authentication Bypass Sprecon E C Firmware Sprecon E P Firmware Sprecon E T3 Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 14:04 euvd

EUVD-2025-200220

Analysis Generated

Mar 15, 2026 - 14:04 vuln.today

CVE Published

Dec 02, 2025 - 11:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker via default cryptographic keys. The use of these keys allows the attacker to read, modify, and write projects and data, or to access any device via remote maintenance.

AnalysisAI

CVE-2025-41742 is a security vulnerability (CVSS 9.8) that allows the attacker. Critical severity with potential for significant impact on affected systems.