All vulnerabilities
CVE-2026-63350

SIMATIC Drive Controller CPU 1504D TF: Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read

Siemens SIMATIC Drive Controller CPU 1504D TFIndustrial & IoT
Open in ThreatlineRecord JSON
CVSS
9.6Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.41%Chance of exploitation activity in the next 30 days, higher than 34% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published13 Oct 2026Updated 13 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

Affected devices do not properly restrict executable content contained in imported trace files.

This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

Text from CVE List

Affected versions 23

  • SIMATIC Drive Controller CPU 1504D TFaffected: and laterCVE List
  • SIMATIC Drive Controller CPU 1507D TFaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1510SP F-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1510SP-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1512SP F-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1512SP-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SP F-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SP-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SPT F-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SPT-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)affected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUsaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511C-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511F-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511T-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511TF-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1512C-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1513-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1513F-1 PNaffected: and laterCVE List

References 1