CVE-2026-62653
Quick assessment
Affected
Siemens Reyrolle 7SR5
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Reyrolle 7SR5 设备中（所有版本 < V2.70）发现了一个漏洞。当设备进入特殊的固件更新模式时，通过专有通信协议接收的输入未得到正确验证，从而导致内存损坏。这可能允许拥有设备物理访问权限的非认证攻击者引发设备崩溃，并有可能在设备上执行任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-62653
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | Reyrolle 7SR5 | 0 ~ V2.70 | - |
|
II. Public POCs for CVE-2026-62653
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-62653
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-62653 (1)
Same Patch Batch · Siemens · 2026-09-08 · 13 CVEs total
| CVE-2026-62645 | 9.8 CRITICAL | 雷尔勒7SR5 V2.70信息泄露致认证绕过 |
| CVE-2026-50093 | 9.0 CRITICAL | Siveillance OIS模块任意文件上传导致root权限 |
| CVE-2026-62650 | 8.8 HIGH | Reyrolle 7SR5 低版本RBAC绕过致权限提升 |
| CVE-2026-67367 | 8.6 HIGH | SIMOVE Fleetmanager 等目录遍历漏洞 |
| CVE-2026-34223 | 8.2 HIGH | CVE-2026-34223 |
| CVE-2026-62649 | 7.5 HIGH | Reyrolle 7SR5 <2.70 未认证拒绝服务漏洞 |
| CVE-2026-62648 | 7.5 HIGH | 瑞洛尔7SR5 V2.70前URL越界写入致DoS |
| CVE-2026-62647 | 7.4 HIGH | Reyrolle 7SR5 早期版本随机数可预测漏洞 |
| CVE-2026-62646 | 7.4 HIGH | Reyrolle 7SR5低熵会话标识符预测漏洞 |
| CVE-2026-62654 | 6.8 MEDIUM | Reyrolle 7SR5 (<V2.70) 维护模式未验证代码 |
| CVE-2026-58113 | 6.1 MEDIUM | Teamcenter多版本认证重定向中XSS漏洞 |
| CVE-2026-62652 | 5.3 MEDIUM | Reyrolle 7SR5低版本固件调试符号泄露 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-62653
No comments yet