CVE-2026-62646 — Siemens / Reyrolle 7SR5

CVE-2026-62646

Siemens / Reyrolle 7SR5 PUBLISHED

Description (CNA)

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an unauthenticated remote attacker to derive valid session identifiers and bypass authentication.

Affected (CNA)

Vendor / product	Versions
Siemens / Reyrolle 7SR5	affected 0 before V2.70

CWE

CWE-331

References

https://cert-portal.siemens.com/productcert/html/ssa-142885.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.