Siemens SIMATIC Drive Controller CPU 1504D TF
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % Ā· percentile 8 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- siemens
- NVD status
- Awaiting Analysis
Description
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right āRead diagnosticsā into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the userās browser session when the resulting error message is displayed.
Weaknesses (CWE)
- CWE-79 ā Improper Neutralization of Input During Web Page Generation
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | siemens |
| CVSS 4.0 | MEDIUM 5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N | siemens |
| CVSS 4.0 | MEDIUM 5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD Ā· productcert@siemens.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | NVD Ā· productcert@siemens.com (Secondary) |
European references
- ENISA EUVD Ā· EUVD-2026-98387
- GCVE Ā· GCVE-0-2026-63356
CERT-FR advisories
- CERTFR-2026-AVI-1298 ā Multiples vulnĆ©rabilitĆ©s dans les produits Siemens Ā· cert.ssi.gouv.fr
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST ā attribution requested |
| ENISA EUVD | ENISA ā reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain ā this product uses data from the NVD API but is not endorsed or certified by the NVD |