4.7
Moyenne
CVE-2024-46886 The web server of affected devices does not properly validate input that is used for a user redirection
Description
The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC Drive Controller CPU 1507D TF 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1510SP F-1 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1510SP-1 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1512SP F-1 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1512SP-1 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1514SP F-2 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1514SP-2 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
| SIMATIC ET 200SP CPU 1514SPT F-2 PN 3.1 | premières → < 3.1.4 | 3.1.4 |
Afficher les 117 autres branches Masquer les 117 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC Drive Controller CPU 1504D TF
Les 24 CVE de SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Moyenne
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Moyenne
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Moyenne
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critique