The vulnerability in Siemens Reyrolle 7SR5 (all versions before V2.70) involves improper input validation related to the use of a random number generator that is not seeded by a True Random Number Generator (TRNG). This results in predictable security-relevant values, including session identifiers used for authentication. An unauthenticated remote attacker could exploit this predictability to guess these values and impersonate an authenticated user, potentially gaining unauthorized access to the device. The CVSS v3.1 base score is 7.4, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity.

An attacker who successfully exploits this vulnerability can predict security-critical values such as session identifiers, enabling them to impersonate legitimate authenticated users. This leads to unauthorized access to the affected device, compromising confidentiality and integrity. Availability is not impacted. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. No official fix or workaround has been documented in the provided data. Until a patch is available, restrict network access to the device and monitor for suspicious authentication attempts.