vulnerability context

CVE-2022-4333

CVSS 9.8 CRITICALEPSS 53%CWE-798

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

Published 2023-06-01 · last modified 2026-06-17

details

CISA KEV status: Not in catalog
CVSS v3: 9.8 / CRITICAL
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 53% percentile (score 0.0085)
CWE: CWE-798
OTX pulses: 0 total, 0 recent

View on NVD → · cve.org

source mentions 1

SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3Full Disclosure · 2d ago

source consensus

Full Disclosure1×

Want the 3-bullet summary of CVE-2022-4333, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →