{"schema":"threatline.record/2","record":{"id":"CVE-2026-63352","aliases":[],"summary":"Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an auth","details":"Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.","categories":["Industrial & IoT"],"product":"SIMATIC Drive Controller CPU 1504D TF","vendor":"Siemens","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC Drive Controller CPU 1504D TF","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC Drive Controller CPU 1507D TF","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1510SP F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1510SP F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1510SP-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1510SP-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1512SP F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1512SP F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1512SP-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1512SP-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1514SP F-2 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1514SP-2 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1514SPT F-2 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP CPU 1514SPT-2 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511T-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511T-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511TF-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1511TF-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1512C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1512C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1512C-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1513-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1513-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1513-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","source_modified_at":"2026-10-14T13:44:30.952Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SIMATIC S7-1500 CPU 1513F-1 PN","vendor":"Siemens","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":6.1,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00238,"percentile":0.14043,"score_date":"2026-10-23"},"published_at":"2026-10-13T09:18:36.831Z","modified_at":"2026-10-14T13:44:30.952Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-63352","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T13:44:30.952Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-63352","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-14T13:44:16.397310Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-14T13:44:30.952Z","content_hash":"d1dd132deb80eb2c3a43a159d53218cbacc04fac4b786074ca7a5b6188dadcd0"}}