CVE-2026-62645: Critical severity Reyrolle 7SR5 vulnerability
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Reyrolle 7SR5to a version that resolves this vulnerability.Fixed in V2.70
Event History
Frequently Asked Questions
Which deployments are affected?
All Reyrolle 7SR5 versions earlier than V2.70 are affected. The issue is exposed through the device web interface.
What does an attacker need to exploit this issue?
An attacker needs access to the web interface. The vulnerability can be exploited without authentication, user interaction, or special privileges, because exposed information can be used to calculate current and past session ID numbers.
What could a successful attacker do?
An attacker could bypass authentication and gain unauthorized access to the device. The assigned severity indicates potential impact to confidentiality, integrity, and availability.
How can I determine whether a device is vulnerable?
Check the installed Reyrolle 7SR5 version. Devices running a version earlier than V2.70 are affected.