Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3

The SPRECON-E-C/-E-P/-E-T3 systems were affected by multiple critical vulnerabilities related to firmware integrity, secure boot, static keys/passwords, hard-coded vendor accounts and transport encryption. An attacker with access to firmware files, network traffic or physical access to a device could extract sensitive keys & credentials or decrypt communications. The vendor provides updates and workarounds, which should be reviewed and applied promptly.

Read the full post here