Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | Reyrolle 7SR5 | unknown |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 08 Sep 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Memory Corruption in Reyrolle 7SR5 Firmware Update Mode Enables Local Code Execution |
Tue, 08 Sep 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device. | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2026-09-08T08:11:34.180Z
Reserved: 2026-07-14T16:24:23.430Z
Link: CVE-2026-62653
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-08T09:18:17.463
Modified: 2026-09-08T09:18:17.463
Link: CVE-2026-62653
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-09-08T09:30:07Z
-
CWE-787
Out-of-bounds Write