CVE-2020-11496: Improper Input Validation

Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device side, which is provided by the engineering software during parameterization. Attackers with access ...

Sprecher Automation SPRECON-E-C / PU-2433 Traversal / DoS

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Sprecher Automation SPRECON-E-C, PU-2433 vulnerable version: 8.49 most vulnerabilities, see "Vulnerable version" for details fixed...

Sprecher Automation SPRECON-E-C / PU-2433 Traversal / DoS

Sprecher Automation SPRECON-E-C and PU-2433 versions prior to 8.49 suffer from directory traversal, missing authentication, broken authentication, and denial of service vulnerabilities. ======================================================================= title: Sprecher Automation SPRECON-E-C ...

Sprecher Automation SPRECON-E Service Program Elevation of Privilege Vulnerability

The Sprecher Automation SPRECON-E Service Program is a service package application from the Austrian company Sprecher Automation that provides operational consulting, planning, development, engineering and on-site installation of equipment, commissioning and operator training. An elevation of...

Design/Logic Flaw

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as...

CVE-2016-10041

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as...

CVE-2016-10041

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as...

CVE-2016-10041

SPRECON-E Service Program (before 3.43 SP0) is affected. The issue stems from incorrect caching of client data that can enable privilege escalation after a non-admin user executes telegram simulation, given preconditions: a user creates an online-connection, is validly authenticated/authorized as...

CVE-2016-10041: Undefined Security Weakness

An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as...

PT-2016-4566

Name of the Vulnerable Software and Affected Versions Sprecher Automation SPRECON-E Service Program versions prior to 3.43 SP0 Description An issue in the SPRECON-E Service Program allows a non-admin user to execute telegram simulation under certain preconditions. This can occur when a user with ...