CVE-2026-62652 Details
Description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.
A vulnerability exists in Siemens Reyrolle 7SR5 devices running versions prior to V2.70. The issue arises because the firmware includes binaries with intact debugging symbols. This oversight could enable an unauthenticated attacker to reverse engineer the firmware more easily, potentially leading to the discovery of additional vulnerabilities.
Users are advised to update to version 2.70 or later. Additional guidance can be found on the Siemens support portal.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 8, 2026CISA-ADP
Assessed Sep 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-142885.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-215 | Insertion of Sensitive Information Into Debugging Code | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Siemens Reyrolle 7SR5 | < V2.70 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 10, 2026 | CVE Modified | CISA-ADP |
| Sep 8, 2026 | New CVE Received | [email protected] |