Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.
References
| Link | Resource |
|---|---|
| https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
History
09 Jun 2023, 18:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sprecher-automation sprecon-e-tc Ax-3110
Sprecher-automation sprecon-e Cp-2131 Firmware Sprecher-automation sprecon-e-p Dl6-1 Sprecher-automation sprecon-e-p Ds6-0 Firmware Sprecher-automation sprecon-e-tc Ax-3110 Firmware Sprecher-automation sprecon-e-p Dq6-1 Sprecher-automation sprecon-e Cp-2330 Firmware Sprecher-automation sprecon-e Ap-2200 Firmware Sprecher-automation sprecon-e-p Dq6-1 Firmware Sprecher-automation sprecon-e Ap-2200 Sprecher-automation sprecon-e Cp-2330 Sprecher-automation sprecon-e-c Sprecher-automation sprecon-e Cp-2131 Sprecher-automation sprecon-e-t3 Sprecher-automation sprecon-e-t3 Firmware Sprecher-automation sprecon-e-p Dl6-1 Firmware Sprecher-automation sprecon-e-c Firmware Sprecher-automation Sprecher-automation sprecon-e-p Ds6-0 |
|
| References | (MISC) https://www.sprecher-automation.com/fileadmin/itSecurity/PDF/2022-12_Advisories.pdf - Vendor Advisory | |
| CPE | cpe:2.3:o:sprecher-automation:sprecon-e-p_ds6-0_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-c:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e-p_dq6-1_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-p_dq6-1:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-p_dl6-1:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e-p_dl6-1_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e-tc_ax-3110_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e-t3_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-t3:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e_cp-2330_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-tc_ax-3110:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e-c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e-p_ds6-0:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e_cp-2131_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e_cp-2330:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e_ap-2200:-:*:*:*:*:*:*:* cpe:2.3:h:sprecher-automation:sprecon-e_cp-2131:-:*:*:*:*:*:*:* cpe:2.3:o:sprecher-automation:sprecon-e_ap-2200_firmware:-:*:*:*:*:*:*:* |
01 Jun 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-01 06:15
Updated : 2023-12-10 15:01
NVD link : CVE-2022-4333
Mitre link : CVE-2022-4333
CVE.ORG link : CVE-2022-4333
JSON object : View
Products Affected
sprecher-automation
- sprecon-e-tc_ax-3110_firmware
- sprecon-e_ap-2200_firmware
- sprecon-e-p_ds6-0_firmware
- sprecon-e-t3_firmware
- sprecon-e_cp-2330_firmware
- sprecon-e-t3
- sprecon-e-c_firmware
- sprecon-e_cp-2131_firmware
- sprecon-e_cp-2330
- sprecon-e-p_dl6-1
- sprecon-e-c
- sprecon-e-p_ds6-0
- sprecon-e-p_dq6-1_firmware
- sprecon-e_ap-2200
- sprecon-e_cp-2131
- sprecon-e-p_dq6-1
- sprecon-e-tc_ax-3110
- sprecon-e-p_dl6-1_firmware
CWE
CWE-798
Use of Hard-coded Credentials