What is CVE-2026-62654?

CVE-2026-62654 is a medium-severity vulnerability in Siemens Reyrolle 7sr5, classified under Download of Code Without Integrity Check. CVSS score: 6.8/10. Published 2026-09-08.

How severe is CVE-2026-62654?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Siemens Reyrolle 7sr5

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This could allow an attacker with physical access to the device to upload and execute arbitrary, unsigned code.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siemens Reyrolle 7sr5

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

productcert@siemens.com

Frequently asked questions

What is CVE-2026-62654?: CVE-2026-62654 is a medium-severity vulnerability in Siemens Reyrolle 7sr5, classified under Download of Code Without Integrity Check. CVSS score: 6.8/10. Published 2026-09-08.
How severe is CVE-2026-62654?: Medium severity. CVSS v3 base score is 6.8 out of 10.