CVE-2026-63355

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-13 · updated 2026-10-15
Weakness: CWE-79

Description

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.

Affected products

Siemens SIMATIC Drive Controller CPU 1504D TF: all versions
Siemens SIMATIC Drive Controller CPU 1507D TF: all versions
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): all versions
Siemens SIMATIC S7-1500 CPU 1511-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511C-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511F-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511T-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1512C-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513F-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513pro-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515F-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515T-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: all versions

References

https://cert-portal.siemens.com/productcert/html/ssa-591731.html

Get alerted when CVE-2026-63355 or the next vulnerability affects your stack