Improper Input Validation in Siemens Diagnostic Trace Page
CVE-2026-63354

9.4CRITICAL

Key Information:

Vendor

Siemens
Status
Simatic Drive Controller Cpu 1504d Tf
Simatic Drive Controller Cpu 1507d Tf
Simatic Et 200sp Cpu 1510sp F-1 Pn
Simatic Et 200sp Cpu 1510sp-1 Pn
Vendor
CVE Published:
13 October 2026

What is CVE-2026-63354?

The Siemens Diagnostics Tool has a vulnerability where it fails to properly validate and sanitize visual marker data in imported CSV trace files before displaying it on the Trace page. This flaw can enable an attacker to trick an authorized user, who has permission to 'Read diagnostics', into importing a malicious trace file. If successful, this could lead to the execution of attacker-controlled JavaScript within the user's browser session. Consequently, the attacker could exploit the compromised session to perform unauthorized PLC operations via the web server, leveraging the permissions of the trusted user.

Affected Version(s)

SIMATIC Drive Controller CPU 1504D TF 0

SIMATIC Drive Controller CPU 1507D TF 0

SIMATIC ET 200SP CPU 1510SP F-1 PN 0

References

https://cert-portal.siemens.com/productcert/html/ssa-5917...

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.