CVE-2026-62652: CWE-215: Insertion of Sensitive Information Into Debugging Code in Siemens Reyrolle 7SR5

Reyrolle 7SR5 devices with firmware versions earlier than V2.70 contain binaries that include debugging symbols. These symbols, which are typically removed before release, can provide attackers with detailed information about the firmware's internal structure. An unauthenticated attacker who can access the publicly available firmware update files could leverage this information to facilitate reverse engineering efforts, potentially identifying further vulnerabilities. The vulnerability is classified under CWE-215 (Information Exposure Through Debug Information). No official patch or remediation details are currently available.

The vulnerability exposes debugging symbols in firmware binaries, which may assist attackers in reverse engineering the device firmware. This could lead to the identification of additional vulnerabilities. However, there is no direct impact such as confidentiality, integrity, or availability loss reported from this issue alone. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to firmware update files where possible to limit exposure. Monitor vendor communications for updates regarding patches or mitigations.