Memory Corruption Vulnerability in Reyrolle 7SR5 by Siemens

CVE-2026-62653

What is CVE-2026-62653?

A memory corruption vulnerability has been discovered in the Reyrolle 7SR5 devices running firmware versions prior to V2.70. This issue arises from improper validation of input received over a proprietary communication protocol when the device is set into a unique firmware-update mode. An attacker with physical access to the device could exploit this vulnerability, potentially leading to a system crash or arbitrary code execution. This situation poses significant risks, particularly in environments where device integrity is paramount.

References