CVE-2026-62652CWE-215

CVE-2026-62652

Medium · published September 8, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00345 · 26.8th percentile
Weakness
CWE-215 · Insertion of Sensitive Information Into Debugging Code
Published
2026-09-08T13:18Z
References (1)
https://cert-portal.siemens.com/productcert/html/ssa-142885.html · [email protected]
EPSS history
Timeline
  • 09 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 08 SEP 08:11Z
    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70)
    cvelistv5