Out-of-bounds Write Vulnerability in Reyrolle 7SR5 by Siemens

CVE-2026-62648

What is CVE-2026-62648?

A vulnerability exists in Reyrolle 7SR5 devices where the URL component of pre-authenticated HTTP messages is inadequately validated. This flaw can lead to an out-of-bounds write condition in memory, allowing an unauthenticated remote attacker to exploit this oversight. By doing so, the attacker can crash the affected device, prompting a reboot and resulting in a denial-of-service condition. This vulnerability underscores the necessity for robust input validation measures in network-facing applications.

References