Advisories · Technology

Siemens SIMATIC Drive Controller CPU 1504D TF.

Every CVE that names Siemens SIMATIC Drive Controller CPU 1504D TF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-63357 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63356 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63355 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63354 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63353 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63352 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63351 CVE record

CVSS 5.3 Medium

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-63350 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 13 Oct 2026
CVE-2026-25789 CVE record

CVSS 7.2 High

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25787 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2026-25786 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Cross-site scripting in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site scripting (XSS)
Not analysed yet 12 May 2026
CVE-2025-40943 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Code injection
Not analysed yet 10 Mar 2026
CVE-2023-37482 CVE record

CVSS 6.9 Medium

Observable discrepancy in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Information disclosure
Not analysed yet 11 Feb 2025
CVE-2024-46887 CVE record

CVSS 6.9 Medium

Authentication bypass in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2024-46886 CVE record

CVSS 5.1 Medium

Open redirect in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Open redirect
Not analysed yet 8 Oct 2024
CVE-2023-46156 CVE record

CVSS 7.5 High

Use after free in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-28831 CVE record

CVSS 8.7 High

Integer overflow in Siemens SIMATIC BRAUMAT and others
- Siemens SIMATIC BRAUMAT
- Siemens SIMATIC Cloud Connect 7 CC712
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2022-38773 CVE record

CVSS 4.6 Medium

Affected devices do not contain an Immutable Root of Trust in Hardware.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1326
Not analysed yet 10 Jan 2023
CVE-2021-44695 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1286
Not analysed yet 13 Dec 2022
CVE-2021-44694 CVE record

CVSS 5.5 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1287
Not analysed yet 13 Dec 2022
CVE-2021-44693 CVE record

CVSS 4.9 Medium

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-1284
Not analysed yet 13 Dec 2022
CVE-2021-40365 CVE record

CVSS 7.5 High

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- CWE-20
Not analysed yet 13 Dec 2022
CVE-2022-30694 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF and others
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Cross-site request forgery (CSRF)
Not analysed yet 8 Nov 2022