PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the failure to properly validate and clean up the visual marker data in the imported CSV tracking files. This could allow attackers to induce authorized users with the “Read...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of annotation fields in the trace files rendered on the Trace page. As a result, attackers can induce authorized users with the “Read diagnostics” functi...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of the calculation signal data in the imported calculation signal files. During rendering on the Trace page, it is possible for attackers to induce users...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from rendering the signal names from the imported CSV tracking files in the Trace page’s menu, without properly cleaning those names. This can lead to cross-site scripting attacks...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from the improper cleaning of the names of calculation signals in the imported CSV tracking files. It may allow attackers to induce authorized users with “read diagnosis”...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of signal data calculated from imported CSV trace files. It may allow attackers to induce users with permission for the “Read diagnostics” function to...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from the improper validation and cleanup of the visual properties of signals before they are calculated in the imported CSV tracking files rendered on the Trace page. This allows...

Siemens SIMATIC Drive Controller CPU 1504D TF: Code injection vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a code injection vulnerability. This vulnerability stems from an improper limitation of the executable content contained in the imported trace files. It may allow attackers to induce authorized users with access to the “Read diagnostics”...

PT-2022-12206 · Siemens · Simatic Drive Controller Cpu 1504D Tf +73

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue concerns the processing of specially crafted packets sent to port 102/tcp. This could potentially allow an attacker to cause a denial of service in the device. Recommendations:...