Description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Reyrolle 7SR5 | < V2.70 | V2.70 |
Advisories 3
- ICSA-26-258-05 Siemens Reyrolle 7SR5 CISA ICS & IT advisories · Sep 15, 2026
- NCSC-2026-0346 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 8, 2026
- SSA-142885 SSA-142885: Multiple Vulnerabilities in Reyrolle 7SR5 Before V2.70 Siemens ProductCERT · Sep 8, 2026