Description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
Published: 2026-09-08
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Local Code Execution
Action: Patch Immediately
AI Analysis

Impact

Memory corruption arises when the device processes data sent over its proprietary communication protocol while in firmware‑update mode. The lack of input validation can cause a crash and potentially allow an attacker to execute arbitrary code on the device.

Affected Systems

Siemens Reyrolle 7SR5, versions prior to V2.70 are vulnerable.

Risk and Exploitability

The CVSS score of 7 indicates a high severity vulnerability. EPSS data is not available, and the issue is not in the CISA KEV catalog, but the need for physical, unauthenticated access means the attack requires proximity to the device. If an attacker can trigger the firmware‑update mode, the exploit path is straightforward and could lead to compromise of the firmware executor and subsequent code execution.

Generated by OpenCVE AI on September 8, 2026 at 09:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device firmware to V2.70 or later, which removes the unsafe input handling.
  • Disable the firmware‑update mode or restrict access to the proprietary communication channel when not needed.
  • Ensure that only authorized personnel have physical access to the device, and log any access attempts to the update interface.

Generated by OpenCVE AI on September 8, 2026 at 09:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 08 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Siemens
Siemens reyrolle 7sr5
Vendors & Products Siemens
Siemens reyrolle 7sr5

Tue, 08 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Reyrolle 7SR5 Firmware Update Mode Enables Local Code Execution

Tue, 08 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 7, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Siemens Reyrolle 7sr5
cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2026-09-14T13:50:49.465Z

Reserved: 2026-07-14T16:24:23.430Z

Link: CVE-2026-62653

cve-icon Vulnrichment

Updated: 2026-09-14T13:47:58.502Z

cve-icon NVD

Status : Deferred

Published: 2026-09-08T09:18:17.463

Modified: 2026-09-14T14:17:08.130

Link: CVE-2026-62653

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T20:35:27Z

Weaknesses