The vulnerability identified as CVE-2026-62649 in Siemens Reyrolle 7SR5 (all versions before 2.70) is due to improper allocation of resources without limits or throttling (CWE-770) in the device's web server. When subjected to a high volume of concurrent HTTP requests, the system fails to manage resources adequately, which can lead to a crash and reboot of the device. This results in a denial-of-service condition. The vulnerability requires no authentication and has a CVSS 3.1 base score of 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability loss.

An unauthenticated remote attacker can exploit this vulnerability by sending a high volume of concurrent HTTP requests to the Reyrolle 7SR5 device's web server, causing it to exhaust system resources, crash, and reboot. This leads to a denial-of-service condition, disrupting the device's availability. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should monitor Siemens advisories for updates and apply any future patches promptly.