Improper Input Validation in Siemens Trace Feature
CVE-2026-63353

9.4CRITICAL

Key Information:

Vendor

Siemens
Status
Simatic Drive Controller Cpu 1504d Tf
Simatic Drive Controller Cpu 1507d Tf
Simatic Et 200sp Cpu 1510sp F-1 Pn
Simatic Et 200sp Cpu 1510sp-1 Pn
Vendor
CVE Published:
13 October 2026

What is CVE-2026-63353?

The Siemens Trace feature contains a flaw where comment fields in imported trace files are not adequately sanitized before being displayed. This vulnerability potentially allows an attacker to manipulate an authorized user with 'Read diagnostics' privileges into importing a specially designed trace file. If exploited, this could result in the execution of attacker-controlled JavaScript in the user's browser, enabling unauthorized operations on PLCs through the web server, all while remaining within the user's authorization context. Ensuring proper input validation in trace file handling is crucial to prevent such security risks.

Affected Version(s)

SIMATIC Drive Controller CPU 1504D TF 0

SIMATIC Drive Controller CPU 1507D TF 0

SIMATIC ET 200SP CPU 1510SP F-1 PN 0

References

https://cert-portal.siemens.com/productcert/html/ssa-5917...

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.