CVE-2026-63357: Siemens SIMATIC Drive Controller CPU 1504d Tf

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

Affected products

• Siemens SIMATIC Drive Controller CPU 1504d Tf: any version
• Siemens SIMATIC Drive Controller CPU 1507d Tf: any version
• Siemens SIMATIC Et 200sp CPU 1510sp-1 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1510sp F-1 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1512sp-1 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1512sp F-1 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1514sp-2 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1514sp F-2 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1514spt-2 Pn: any version
• Siemens SIMATIC Et 200sp CPU 1514spt F-2 Pn: any version
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v2 Cpus - Windows OS: any version
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Industrial OS: any version
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC2 Incl. Siplus Variants v3 Cpus - Windows OS: any version
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp PC3 v4 Cpus: any version
• Siemens SIMATIC Et 200sp Open Controller CPU 1515sp Pc Incl. Siplus Variants: any version
• Siemens SIMATIC s7-1500 CPU 1511-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1511c-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1511f-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1511t-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1511tf-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1512c-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1513-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1513f-1 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1513pro-2 Pn: any version
• Siemens SIMATIC s7-1500 CPU 1513pro F-2 Pn: any version
• and 78 more

Published 2026-10-13. Last modified 2026-10-15.