VDB
CVE-2026-62654
CVE-2026-62654
PUBLISHED
CVSS 6.8 MEDIUM
Reported by siemens · Published September 8, 2026
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This could allow an attacker with physical access to the device to upload and execute arbitrary, unsigned code.
Risk Scores
CVSS 3.1
6.8
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Reyrolle 7SR5 | 0 |
| Siemens | Reyrolle 7SR5 | 0 |
Timeline
- Sep 8, 2026 EPSS Score
- Sep 8, 2026 CVE Published
- Sep 8, 2026 CVE Updated