# CVE-2025-41743: Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local…

Source: https://junglewise.ai/threats/cve-2025-41743-insufficient-encryption-strength-in-sprecher-automation-sprecon-e  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-02  
License: CC BY 4.0 with a link back

CVE-2025-41743 · Severity: medium · CVSS 4 · Published 2025-12-02

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes.

Technologies: [Sprecher-Automation Sprecon-E-C](https://junglewise.ai/threats/technologies/sprecon-e-c), [Sprecher-Automation Sprecon-E-C Firmware](https://junglewise.ai/threats/technologies/sprecon-e-c-firmware), [Sprecher-Automation Sprecon-E-P](https://junglewise.ai/threats/technologies/sprecon-e-p), [Sprecher-Automation Sprecon-E-P Firmware](https://junglewise.ai/threats/technologies/sprecon-e-p-firmware), [Sprecher-Automation Sprecon-E-T3](https://junglewise.ai/threats/technologies/sprecon-e-t3), [Sprecher-Automation Sprecon-E-T3 Firmware](https://junglewise.ai/threats/technologies/sprecon-e-t3-firmware). Vendors: [Sprecher-Automation](https://junglewise.ai/threats/vendors/sprecher-automation).

## Quick answers

**Is CVE-2025-41743 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-41743 being exploited in the wild.

**How severe is CVE-2025-41743?** Medium severity, with a CVSS score of 4, published 2 December 2025.

**Which products and versions are affected?** Sprecher-Automation Sprecon-E-C, Sprecher-Automation Sprecon-E-C Firmware, Sprecher-Automation Sprecon-E-P, Sprecher-Automation Sprecon-E-P Firmware and 2 more. The advisory does not name versions.

**Is there a fix for CVE-2025-41743?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-41743?** Check whether you run Sprecher-Automation Sprecon-E-C, Sprecher-Automation Sprecon-E-C Firmware, Sprecher-Automation Sprecon-E-P or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Sprecher-Automation Sprecon-E-C
- Sprecher-Automation Sprecon-E-C Firmware
- Sprecher-Automation Sprecon-E-P
- Sprecher-Automation Sprecon-E-P Firmware
- Sprecher-Automation Sprecon-E-T3
- Sprecher-Automation Sprecon-E-T3 Firmware

## Related threats

- [Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to…](https://junglewise.ai/threats/cve-2025-41744-sprecher-automations-sprecon-e-series-uses-default-cryptographic)
- [Sprecher Automations SPRECON-E-C, SPRECON-E-P, SPRECON-E-T3 is vulnerable to attack by an unauthorized remote attacker…](https://junglewise.ai/threats/cve-2025-41742-sprecher-automations-sprecon-e-c-sprecon-e-p-sprecon-e-t3-is)