Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
A trace file meant to diagnose a production line should not be able to operate the PLC. Siemens SSA-591731 (Oct 13): 8 XSS flaws in the SIMATIC S7-1500 web server Trace page, CVE-2026-63350 through CVE-2026-63357. https://t.co/hxzcrYFxOo
A trace file meant to diagnose a production line should not be able to operate the PLC. Siemens SSA-591731 (Oct 13): 8 XSS flaws in the SIMATIC S7-1500 web server Trace page, CVE-2026-63350 through CVE-2026-63357. https://t.co/JoVFpXQNAS