Siemens Reyrolle 7sr5 vulnerabilities

9 CVEs affecting Siemens Reyrolle 7sr5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62654, published 2026-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-62645, published 2026-09-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers.…
CVE-2026-62650, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based…
CVE-2026-62649, published 2026-09-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP…
CVE-2026-62648, published 2026-09-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending…
CVE-2026-62647, published 2026-09-08. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for…
CVE-2026-62646, published 2026-09-08. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy…
CVE-2026-62652, published 2026-09-08. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an…
CVE-2026-62653, published 2026-09-08. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special…
CVE-2026-62654, published 2026-09-08. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads…