Siemens SIMATIC Drive Controller CPU 1504D TF
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-63357 | * | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Tr | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63356 | * | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messa | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63355 | * | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63354 | * | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-63353 | * | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-63352 | * | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63351 | * | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-63350 | * | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social en | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-25789 | < V3.1.6 | Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social | HIGH 7.2 | 0.3 % | ||
| CVE-2026-25787 | < V3.1.6 | Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-25786 | < V3.1.6 | Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface | CRITICAL 9.3 | 0.4 % | ||
| CVE-2025-40943 | < V3.1.6 | Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering | CRITICAL 9.4 | 0.5 % | ||
| CVE-2023-37482 | V3.1.0 – < V3.1.2 | The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated re | MEDIUM 6.9 | 0.5 % | ||
| CVE-2024-46887 | < V3.1.4 | The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could | MEDIUM 6.9 | 0.6 % | ||
| CVE-2024-46886 | < V3.1.4 | The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to mak | MEDIUM 5.1 | 0.4 % | ||
| CVE-2023-46156 | < V3.1.0 | Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of servi | HIGH 7.5 | 1.2 % | ||
| CVE-2023-28831 | < V2.9.7 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application | HIGH 8.7 | 1.1 % | ||
| CVE-2022-38773 | * | Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not b | MEDIUM 6.8 | 0.3 % | ||
| CVE-2021-44695 | All versions < V2.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-44694 | All versions < V2.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.7 % | ||
| CVE-2021-44693 | All versions < V2.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.8 % | ||
| CVE-2021-40365 | All versions < V2.9.7 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a deni | HIGH 7.5 | 0.9 % | ||
| CVE-2022-30694 | All versions < V2.9.7 | The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attac | MEDIUM 6.5 | 0.3 % |