The web server of affected devices does not properly validate input that is used for a user redirection.

published 2024-10-08 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-42133

cvss: 4.7; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 34%
public exploits: 0; none known

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

Patch / fix

fixed in 30

Siemens SIMATIC Drive Controller CPU 1504D TF V3.1.4
Siemens SIMATIC Drive Controller CPU 1507D TF V3.1.4
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN V2.9.8, V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN V3.1.4
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN V3.1.4
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS V21.9.8
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS V31.1.4
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS V31.1.4
Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC V4.7.0
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly V4.7.0
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC V4.7.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-284-01 updated 2025-10-14 cvss 4.7

Siemens SIMATIC S7-1500 and S7-1200 CPUs

Siemens SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) < 3.1.4 Siemens SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com

show 7 more

Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS < 21.9.8
affected: fixed in V21.9.8, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS < 31.1.4 Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS < 31.1.4
affected: fixed in V31.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0) < 4.7.0

+13 more productsfewer

Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0) < 4.7.0 Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0) < 4.7.0

affected: fixed in V4.7.0, mitigation support.industry.siemens.com
Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com
Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) < 3.1.4
affected: fixed in V3.1.4, mitigation support.industry.siemens.com
Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) < 2.9.8
affected: fixed in V2.9.8, mitigation support.industry.siemens.com

149 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-10-09)

Exploit prediction

0.40% chance of exploitation in the next 30 days, higher than 34% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	4.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CNA	4.0	5.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
CNA	4.0	5.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

Siemens SIMATIC Drive Controller CPU 1504D TF
Siemens SIMATIC Drive Controller CPU 1507D TF
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS
Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly
Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC
Siemens SIMATIC S7-1500 CPU 1511-1 PN
Siemens SIMATIC S7-1500 CPU 1511C-1 PN
Siemens SIMATIC S7-1500 CPU 1511F-1 PN
Siemens SIMATIC S7-1500 CPU 1511T-1 PN
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
Siemens SIMATIC S7-1500 CPU 1512C-1 PN
Siemens SIMATIC S7-1500 CPU 1513-1 PN
Siemens SIMATIC S7-1500 CPU 1513F-1 PN
Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN
Siemens SIMATIC S7-1500 CPU 1513pro-2 PN
Siemens SIMATIC S7-1500 CPU 1515-2 PN
Siemens SIMATIC S7-1500 CPU 1515F-2 PN
Siemens SIMATIC S7-1500 CPU 1515T-2 PN
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN
Siemens SIMATIC S7-1500 CPU 1516pro-2 PN

Classification

Weakness

CWE-601 URL Redirection to Untrusted Site

References

cert-portal.siemens.com /productcert/html/ssa-876787.html

Sources

CVE List CVE-2024-46886
NVD CVE-2024-46886

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary