{"id":"CVE-2026-62645","aliases":["EUVD-2026-72660","GHSA-fvvh-v2c5-rpg2"],"status":"published","title":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is...","description":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00646,"percentile":0.51458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2026-09-08T08:11:22Z","modified":"2026-09-08T18:41:55Z","products":[{"vendor":"siemens","product":"reyrolle 7sr5"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-142885.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62645"},{"url":"https://github.com/advisories/GHSA-fvvh-v2c5-rpg2"}],"sources":{"cve":[{"id":"CVE-2026-62645","description":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.","status":"published","published":"2026-09-08T08:11:22.667Z","modified":"2026-09-08T12:26:29.371Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:20:14.665567Z"}],"euvd":[{"id":"EUVD-2026-72660","description":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.","status":"published","published":"2026-09-08T08:11:22Z","modified":"2026-09-08T12:26:29Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T17:28:29.861344Z"}],"ghsa":[{"id":"GHSA-fvvh-v2c5-rpg2","title":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is...","description":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.","status":"published","published":"2026-09-08T09:35:38Z","modified":"2026-09-08T09:35:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:11:27.823827Z"}],"nvd":[{"id":"CVE-2026-62645","description":"A vulnerability has been identified in Reyrolle 7SR5 (All versions \u003c V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.","status":"published","published":"2026-09-08T09:18:16.583Z","modified":"2026-09-08T18:41:55.127Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:12:44.436435Z"}]}}