CVE-2026-63357

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-13 · updated 2026-10-15
Weakness: CWE-79

Description

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.

Affected products

Siemens SIMATIC Drive Controller CPU 1504D TF: all versions
Siemens SIMATIC Drive Controller CPU 1507D TF: all versions
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN: all versions
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs: all versions
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): all versions
Siemens SIMATIC S7-1500 CPU 1511-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511C-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511F-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511T-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1512C-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513F-1 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513pro-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515F-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515T-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN: all versions
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: all versions

References

https://cert-portal.siemens.com/productcert/html/ssa-591731.html

Get alerted when CVE-2026-63357 or the next vulnerability affects your stack