CVE-2026-62647
HighCVSS 7.4Summary
In Reyrolle 7SR5 devices, a random number generator used for security-relevant values (such as session identifiers) is not initialized with a True Random Number Generator (TRNG), resulting in predictable sequences. An unauthenticated remote attacker can more easily predict values and impersonate a legitimate user.
Risk Assessment
Predictable values could allow unauthorized access to the device, potentially compromising security and system integrity.
Recommendation
Update the software to version V2.70 or later, which includes a fix for the random number generator.
Other vulnerabilities in Reyrolle 7SR5
See all- CVE-2026-62654Medium
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This could allow an attacker with physical access to the device to upload and execute arbitrary, unsigned code.
- CVE-2026-62653Medium
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
- CVE-2026-62652Medium
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.
- CVE-2026-62650High
Reyrolle 7SR5 devices do not properly enforce server-side authorization checks in the web-based management interface. Manipulation of request data can bypass RBAC restrictions, allowing an authenticated low-privileged attacker to escalate to administrative level.
- CVE-2026-62649High
The web server in Reyrolle 7SR5 devices does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. An unauthenticated remote attacker can cause the device to crash and reboot, resulting in denial of service.
- CVE-2026-62648High
In Reyrolle 7SR5 devices, the length of the URL component in pre-authenticated HTTP messages is not properly validated before appending additional data, resulting in an out-of-bounds write. An unauthenticated remote attacker can crash the device, causing a reboot and denial of service.
- CVE-2026-62646High
In Reyrolle 7SR5 devices, session identifiers are generated using an algorithm with insufficient randomness, resulting in low-entropy tokens that can be predicted or brute-forced. An unauthenticated remote attacker can derive valid session identifiers and bypass authentication.
- CVE-2026-62645Critical
Vulnerability in Reyrolle 7SR5 exposes information through the web interface that can be used to calculate current and past session ID numbers. An attacker could bypass authentication and gain unauthorized access to the device.
Original NVD description (English source)
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is not initialized with a True Random Number Generator (TRNG), resulting in a predictable sequence of generated values. This could allow an unauthenticated remote attacker to more easily predict the generated values and impersonate a legitimate authenticated user, potentially gaining unauthorized access to the device.