A critical authentication bypass vulnerability in Siemens Reyrolle 7SR5 devices allows remote, unauthenticated attackers to hijack sessions by predicting security-relevant values.

The device uses a cryptographically weak random number generator for session identifiers instead of a True Random Number Generator. This flaw allows an unauthenticated remote attacker to predict session tokens and gain unauthorized access to the device.

The ability for an attacker to impersonate a legitimate user on industrial equipment poses a severe risk to operational integrity. Given the CVSS score of 7.4, this high-severity flaw could lead to unauthorized control of protective relay settings, resulting in operational downtime, safety risks, or permanent damage to electrical infrastructure.

Immediate Action: Update the Siemens Reyrolle 7SR5 firmware to version V2.70 or later as specified in the official Siemens security advisory.

Proactive Monitoring: Monitor device access logs for unusual patterns, such as multiple rapid authentication attempts or sessions appearing from unexpected network segments.

Compensating Controls: Restrict network access to the device management interface by implementing strict firewall rules and isolating the management plane from the general business network.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to the security of power grid infrastructure components. Organizations utilizing the Reyrolle 7SR5 must prioritize the deployment of firmware version V2.70 to remediate the underlying weakness in session management. Failure to update leaves these devices exposed to unauthorized remote access and potential manipulation of critical safety settings.