CVE-2026-25787 
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page.
If a benign user with appropriate rights accesses the "Motion Control Diagnostics" parameters page, the malicious code would be executed in the scope of their web session.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: SIMATIC Drive Controller CPU 1504D TF
default_status: unknown
vendor: Siemens
product: SIMATIC Drive Controller CPU 1507D TF
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1510SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1512SP-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1514SP F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1514SP-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1514SPT F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP CPU 1514SPT-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511T-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511T-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511TF-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1511TF-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1512C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1512C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1512C-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513pro F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1513pro-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515T-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515T-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515TF-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1515TF-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516pro F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516pro-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516T-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516T-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516TF-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1516TF-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517F-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517T-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517T-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517TF-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1517TF-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518-4 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518F-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518F-4 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518T-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518T-4 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518TF-3 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU 1518TF-4 PN/DP
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S F V2
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S F V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S F V4
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S V2
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1507S V4
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S F V2
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S F V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S F V4
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S T V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S TF V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S V2
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller CPU 1508S V4
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller Linux V2
default_status: unknown
vendor: Siemens
product: SIMATIC S7-1500 Software Controller Linux V3
default_status: unknown
vendor: Siemens
product: SIMATIC S7-PLCSIM Advanced
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1511F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1513F-1 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1515F-2 PN
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1515F-2 PN RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516F-3 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1518-4 PN/DP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
default_status: unknown
vendor: Siemens
product: SIPLUS S7-1500 CPU 1518F-4 PN/DP
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
baseScore: 9.1
baseSeverity: CRITICAL
Published: 2026-05-12T08:21:06.426Z