CVE-2024-46887: Siemens SIMATIC Drive Controller CPU 1504d Tf

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

Affected products

  • Siemens SIMATIC Drive Controller CPU 1504d Tf: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Drive Controller CPU 1507d Tf: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1510sp-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1510sp F-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1512sp-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1512sp F-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1514sp-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1514sp F-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1514spt-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp CPU 1514spt F-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v2 Cpus - Windows OS: before V21.9.8 (fixed in V21.9.8)
  • Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Industrial OS: before V31.1.4 (fixed in V31.1.4)
  • Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Windows OS: before V31.1.4 (fixed in V31.1.4)
  • Siemens SIMATIC s7-1500 CPU 1511-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1511c-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1511f-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1511t-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1511tf-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1512c-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1513-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1513f-1 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1513pro-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1513pro F-2 Pn: before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1515-2 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • Siemens SIMATIC s7-1500 CPU 1515f-2 Pn: before V2.9.8 (fixed in V2.9.8); before V3.1.4 (fixed in V3.1.4)
  • and 62 more

Published 2024-10-08. Last modified 2026-06-17.