All vulnerabilities
CVE-2026-63356

SIMATIC Drive Controller CPU 1504D TF: Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to so

Siemens SIMATIC Drive Controller CPU 1504D TFIndustrial & IoT
Open in ThreatlineRecord JSON
CVSS
6.1Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 15% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published13 Oct 2026Updated 13 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.

This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.

Text from CVE List

Affected versions 23

  • SIMATIC Drive Controller CPU 1504D TFaffected: and laterCVE List
  • SIMATIC Drive Controller CPU 1507D TFaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1510SP F-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1510SP-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1512SP F-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1512SP-1 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SP F-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SP-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SPT F-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP CPU 1514SPT-2 PNaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)affected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OSaffected: and laterCVE List
  • SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUsaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511C-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511F-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511T-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1511TF-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1512C-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1513-1 PNaffected: and laterCVE List
  • SIMATIC S7-1500 CPU 1513F-1 PNaffected: and laterCVE List

References 1