CVE-2026-62653

Katalog CVE

CVSS 6.8 · Medium EPSS 0,28%

Kerentanan Out-of-bounds Write. Skor CVSS 3.1 6.8 (Medium) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.

Rincian

Terbit di NVD

8 September 2026

Terakhir diubah

14 September 2026

Status NVD

Deferred

CVSS 3.1

6.8 (Medium), sumber siemens.com
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/html/ssa-142885.html