Skip to content
OpenAdvisories
Critical SSA-142885 14 CVEs

SSA-142885: Multiple Vulnerabilities in Reyrolle 7SR5 Before V2.70

Published Sep 8, 2026 · Updated Sep 8, 2026

Vendor: Siemens Product: Reyrolle 7SR5

Summary

Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities.

Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.

Vulnerabilities 14

  • Critical 9.8
    CVE-2026-62645

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web int…

    Siemens Reyrolle 7SR5 ICS / OT
  • High 8.8
    CVE-2026-62650

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the we…

    Siemens Reyrolle 7SR5 ICS / OT
  • High 8.2
    CVE-2024-42386

    Use of Out-of-range Pointer Offset in Mongoose Web Server library

    Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

    Cesanta Software Mongoose Web Server
  • High 7.5
    CVE-2024-42384

    Integer Overflow or Wraparound in Mongoose Web Server library

    Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

    Cesanta Software Mongoose Web Server
  • High 7.5
    CVE-2026-62648

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained …

    Siemens Reyrolle 7SR5 ICS / OT
  • High 7.5
    CVE-2026-62649

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or …

    Siemens Reyrolle 7SR5 ICS / OT
  • High 7.4
    CVE-2026-62646

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an…

    Siemens Reyrolle 7SR5 ICS / OT
  • High 7.4
    CVE-2026-62647

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to gener…

    Siemens Reyrolle 7SR5 ICS / OT
  • Medium 6.8
    CVE-2026-62653

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary comm…

    Siemens Reyrolle 7SR5 ICS / OT
  • Medium 6.8
    CVE-2026-62654

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activate…

    Siemens Reyrolle 7SR5 ICS / OT
  • Medium 5.3
    CVE-2026-62652

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from…

    Siemens Reyrolle 7SR5 ICS / OT
  • Medium 4.3
    CVE-2024-42391

    Use of Out-of-range Pointer Offset in Mongoose Web Server library

    Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

    Cesanta Software Mongoose Web Server
  • Medium 4.0
    CVE-2024-42385

    Improper Neutralization of Delimiters in Mongoose Web Server library

    Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

    Cesanta Software Mongoose Web Server
  • Medium 4.0
    CVE-2024-42392

    Improper Neutralization of Delimiters in Mongoose Web Server library

    Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

    Cesanta Software Mongoose Web Server

Revision history

  1. #1

    Publication Date

References