As cited
Copy frozen at (site build).
vulnerabilities
Siemens Reyrolle 7SR5
Siemens Reyrolle 7SR5 relays before version 2.70 contain 14 vulnerabilities spanning integer overflows, improper input validation, authentication bypass, denial of service (DoS), and insufficient random number generation in the web server and firmware update mechanisms. Siemens has released version 2.70 as the remediation and recommends immediate patching. The vulnerabilities affect energy sector critical infrastructure globally, with CVSS scores ranging from 4.0 to 9.8.
Why it matters: Power operators running Reyrolle 7SR5 relays must patch to version 2.70 immediately, as CVE-2026-62645 and CVE-2026-62646 allow unauthenticated remote attackers to bypass authentication and gain full administrative access to protective relay devices controlling grid reliability.
- Source published
- First seen by Cybersecurity Tracker