Vulnerability · Published Sep 8, 2026 · Assigned by siemens
CVE-2026-62647
High 7.4
In plain English
A high-severity improper input validation in Reyrolle 7SR5 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Official description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is not initialized with a True Random Number Generator (TRNG), resulting in a predictable sequence of generated values. This could allow an unauthenticated remote attacker to more easily predict the generated values and impersonate a legitimate authenticated user, potentially gaining unauthorized access to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Reyrolle 7SR5 | 0 – before V2.70 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N