Siemens SIMATIC Drive Controller CPU 1504D TF

CVE-2026-63352

MEDIUM 5.3

At a glance

Source: NVD
EPSS: EPSS 0.19 % · percentile 8 (2026-10-29)
State: PUBLISHED
Published: 2026-10-13 09:18 UTC
Updated: 2026-10-14 13:44 UTC
Assigner: siemens
NVD status: Awaiting Analysis

Search on…

Description

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

Weaknesses (CWE)

CWE-79 — Improper Neutralization of Input During Web Page Generation

References

https://cert-portal.siemens.com/productcert/html/ssa-591731.html

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	siemens
CVSS 4.0	MEDIUM 5.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N	siemens
CVSS 4.0	MEDIUM 5.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	MEDIUM 6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	NVD · productcert@siemens.com (Secondary)

European references

ENISA EUVD · EUVD-2026-98383
GCVE · GCVE-0-2026-63352

CERT-FR advisories

CERTFR-2026-AVI-1298 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Affected products

Product	Versions
Siemens · SIMATIC Drive Controller CPU 1504D TF	affected 0 < *
Siemens · SIMATIC Drive Controller CPU 1507D TF	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1510SP F-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1510SP F-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1510SP-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1510SP-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1512SP F-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1512SP F-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1512SP-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1512SP-1 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1514SP F-2 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1514SP-2 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1514SPT F-2 PN	affected 0 < *
Siemens · SIMATIC ET 200SP CPU 1514SPT-2 PN	affected 0 < *
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)	affected 0 < *
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS	affected 0 < *
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS	affected 0 < *
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS	affected 0 < *
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs	affected 0 < *
Siemens · SIMATIC S7-1500 CPU 1511-1 PN	affected 0 < *

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 Siemens SIMATIC Drive Controller CPU 1504D TF