CVE-2026-62653

Medium6.8Published on September 8, 2026

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.

CVSS score6.8 / 10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-787

Vulnerabilities

Siemens Reyrolle 7SR5 Flaws Expose Energy Devices to Authentication Bypass and Remote Crashes

CISA warns 14 flaws in Siemens Reyrolle 7SR5 before V2.70, including critical CVE-2026-62645 auth bypass and remote crash bugs. Upgrade advised.

Sep 17, 202601:235 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Siemens Reyrolle 7SR5 Flaws Expose Energy Devices to Authentication Bypass and Remote Crashes