CVE-2024-46886

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-08 · updated 2026-06-17
Weakness: CWE-601

Description

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

Affected products

Siemens SIMATIC Drive Controller CPU 1504D TF: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC Drive Controller CPU 1507D TF: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: before V2.9.8; before V3.1.4 — fixed in V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: before V2.9.8; before V3.1.4 — fixed in V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: before V2.9.8; before V3.1.4 — fixed in V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: before V2.9.8; before V3.1.4 — fixed in V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN: before V3.1.4 — fixed in V3.1.4
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS: before V21.9.8 — fixed in V21.9.8
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS: before V31.1.4 — fixed in V31.1.4
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS: before V31.1.4 — fixed in V31.1.4
Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly: before V4.7.0 — fixed in V4.7.0
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC: before V4.7.0 — fixed in V4.7.0

How to fix

Upgrade to a fixed version: Siemens SIMATIC Drive Controller CPU 1504D TF V3.1.4; Siemens SIMATIC Drive Controller CPU 1507D TF V3.1.4; Siemens SIMATIC ET 200SP CPU 1510SP-1 PN V2.9.8, V3.1.4; Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN V2.9.8, V3.1.4; Siemens SIMATIC ET 200SP CPU 1512SP-1 PN V2.9.8, V3.1.4; Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN V2.9.8, V3.1.4; Siemens SIMATIC ET 200SP CPU 1514SP-2 PN V3.1.4; Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN V3.1.4; Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN V3.1.4; Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN V3.1.4; Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS V21.9.8; Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS V31.1.4. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-876787.html

Get alerted when CVE-2024-46886 or the next vulnerability affects your stack