CVE-2024-46886: Siemens SIMATIC Drive Controller CPU 1504d Tf

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

Affected products

• Siemens SIMATIC Drive Controller CPU 1504d Tf: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Drive Controller CPU 1507d Tf: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1510sp-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1510sp F-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1512sp-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1512sp F-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1514sp-2 Pn: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1514sp F-2 Pn: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1514spt-2 Pn: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp CPU 1514spt F-2 Pn: before V3.1.4 (fixed in V3.1.4)
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v2 Cpus - Windows OS: before V21.9.8 (fixed in V21.9.8)
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Industrial OS: before V31.1.4 (fixed in V31.1.4)
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Windows OS: before V31.1.4 (fixed in V31.1.4)
• Siemens SIMATIC s7-1200 CPU 1211c Ac/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1211c Dc/dc/dc: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1211c Dc/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1212c Ac/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1212c Dc/dc/dc: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1212c Dc/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1212fc Dc/dc/dc: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1212fc Dc/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1214c Ac/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1214c Dc/dc/dc: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1214c Dc/dc/rly: before V4.7.0 (fixed in V4.7.0)
• Siemens SIMATIC s7-1200 CPU 1214fc Dc/dc/dc: before V4.7.0 (fixed in V4.7.0)
• and 101 more

Published 2024-10-08. Last modified 2026-06-17.