Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from the improper cleaning of the names of calculation signals in the imported CSV tracking files. It may allow attackers to induce authorized users with “read diagnosis”...