Description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
Published: 2026-09-08
Score: 7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Memory corruption arises when the device processes data sent over its proprietary communication protocol while in firmware‑update mode. The lack of input validation can cause a crash and potentially allow an attacker to execute arbitrary code on the device.

Affected Systems

Siemens Reyrolle 7SR5, versions prior to V2.70 are vulnerable.

Risk and Exploitability

The CVSS score of 7 indicates a high severity vulnerability. EPSS data is not available, and the issue is not in the CISA KEV catalog, but the need for physical, unauthenticated access means the attack requires proximity to the device. If an attacker can trigger the firmware‑update mode, the exploit path is straightforward and could lead to compromise of the firmware executor and subsequent code execution.

Generated by OpenCVE AI on September 8, 2026 at 09:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device firmware to V2.70 or later, which removes the unsafe input handling.
  • Disable the firmware‑update mode or restrict access to the proprietary communication channel when not needed.
  • Ensure that only authorized personnel have physical access to the device, and log any access attempts to the update interface.

Generated by OpenCVE AI on September 8, 2026 at 09:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Reyrolle 7SR5 Firmware Update Mode Enables Local Code Execution

Tue, 08 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 7, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2026-09-08T08:11:34.180Z

Reserved: 2026-07-14T16:24:23.430Z

Link: CVE-2026-62653

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-08T09:18:17.463

Modified: 2026-09-08T09:18:17.463

Link: CVE-2026-62653

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T09:30:07Z

Weaknesses