SSA-142885: Multiple Vulnerabilities in Reyrolle 7SR5 Before V2.70
Advisory ansehen veröffentlicht 2026-09-08
Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-62654DE | medium6.8OT erhöht | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which th… | ||||
| CVE-2026-62653DE | medium6.8 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed… | ||||
| CVE-2026-62652DE | medium5.3 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could al… | ||||
| CVE-2026-62650DE | high8.8OT erhöht | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allow… | ||||
| CVE-2026-62649DE | high7.5 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of conc… | ||||
| CVE-2026-62648DE | high7.5 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated… | ||||
| CVE-2026-62647DE | high7.4 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers use… | ||||
| CVE-2026-62646DE | high7.4 | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token… | ||||
| CVE-2026-62645DE | critical9.8OT erhöht | — | ||
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past ses… | ||||
| CVE-2024-42392US | high7.5 | — | ||
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters. | ||||
| CVE-2024-42391US | medium5.3 | — | ||
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintend… | ||||
| CVE-2024-42386US | high7.5 | — | ||
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the ap… | ||||
| CVE-2024-42385US | high7.0 | — | ||
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected c… | ||||
| CVE-2024-42384US | high7.5 | — | ||
Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the applic… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (14)
- BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/ - BehobenReyrolle 7SR5
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109772413/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan