AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SiemensCVE-2026-62652

Siemens Reyrolle 7SR5: unauthenticated attacker could the publicly available

Siemens

CVE-2026-62652 · Published Sep 8, 2026 · updated Sep 10, 2026

Medium6.9
Fix: upgrade to V2.70 or later
Siemens advisory

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.

Affected versions

PackageAffectedFixed in
Reyrolle 7SR5
Product
< V2.70V2.70
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-215

More Siemens advisories

All Siemens
Critical 9.2Sep 8Siemens SIMOVE Fleetmanager: path traversalCVE-2026-67367fixed in V3.1.13 +4High 8.7Sep 8Siemens Reyrolle 7SR5: denial of serviceCVE-2026-62649fixed in V2.70High 8.7Sep 8Siemens Reyrolle 7SR5: improper access controlCVE-2026-62650fixed in V2.70High 7.0Sep 8Siemens Reyrolle 7SR5: memory corruptionCVE-2026-62653fixed in V2.70High 7.0Sep 8Siemens Reyrolle 7SR5: attacker could the device to uploadCVE-2026-62654fixed in V2.70High 8.5Sep 8Siemens Teamcenter: cross-site scriptingCVE-2026-58113fixed in V2412.0013 +3