Vulnerability in Siemens SIMATIC Drive Controller CPU 1504D TF

[ Description ]Official description

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• NCSC-NL13 Oct 2026NCSC-2026-0415

  Vulnerabilities fixed in Siemens products Translated from Dutch

  Probability/damage M/HCVE-2024-7322CVE-2025-6965CVE-2025-70873+38 more CVEs
• CERT-FR13 Oct 2026CERTFR-2026-AVI-1298

  Multiple vulnerabilities in Siemens products Translated from French

  Multiple vulnerabilities have been discovered in Siemens products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

  CVE-2021-41617CVE-2023-28531CVE-2023-51384+716 more CVEs
• BSI CERT-Bund12 Oct 2026WID-SEC-2026-3891

  Siemens SIMATIC S7: Multiple vulnerabilities Translated from German

  CVE-2026-46331CVE-2024-49998CVE-2025-21779+384 more CVEs

[ References ]References

• cert-portal.siemens.com/productcert/html/ssa-591731.html