Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisorySeverity 9.8 critical

Siemens Reyrolle 7SR5

ICSA-26-258-05 · CISA · September 8, 2026

Summary

Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.

From CISA, quoted as published. Check the source before acting.

What to do

Update to V2.70 or later version

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2024-423847.5 highNo0.5%Integer Overflow or Wraparound (CWE-190)
CVE-2024-423854.0 mediumNo0.1%Improper Neutralization of Delimiters (CWE-140)
CVE-2024-423868.2 highNo0.4%Use of Out-of-range Pointer Offset (CWE-823)
CVE-2024-423914.3 mediumNo0.3%Use of Out-of-range Pointer Offset (CWE-823)
CVE-2024-423924.0 mediumNo0.2%Improper Neutralization of Delimiters (CWE-140)
CVE-2026-626459.8 criticalNo0.6%Missing Authentication for Critical Functionality (CWE-306)
CVE-2026-626467.4 highNo0.5%Insufficient Entropy (CWE-331)
CVE-2026-626477.4 highNo0.6%Improper Input Validation (CWE-20)
CVE-2026-626487.5 highNo0.6%Out-of-bounds Write (CWE-787)
CVE-2026-626497.5 highNo0.6%Allocation of Resources Without Limits or Throttling (CWE-770)
CVE-2026-626508.8 highNo0.6%Authentication Bypass Using an Alternate Path or Channel (CWE-288)
CVE-2026-626525.3 mediumNo0.3%Insertion of Sensitive Information Into Debugging Code (CWE-215)
CVE-2026-626536.8 mediumNo0.3%Out-of-bounds Write (CWE-787)
CVE-2026-626546.8 mediumNo0.2%Download of Code Without Integrity Check (CWE-494)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
SiemensReyrolle 7SR5vers:intdot/<2.70—

Why it's on these mode pages

  • Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)

Change history

  1. September 8, 2026: Publication Date
  2. September 15, 2026: Initial CISA Republication of Siemens ProductCERT SSA-142885 advisory
  3. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com