Skip to content
Fencer Vulns
medium 5.3

CVE-2024-46887 json

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint.

published 2024-10-08 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-42134

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 46%
public exploits
0
none known

Summary

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

Patch / fix

  • Siemens SIMATIC Drive Controller CPU 1504D TF V3.1.4
  • Siemens SIMATIC Drive Controller CPU 1507D TF V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1510SP-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1512SP-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1514SP-2 PN V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN V3.1.4
  • Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN V3.1.4
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS V21.9.8
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS V31.1.4
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS V31.1.4
  • Siemens SIMATIC S7-1500 CPU 1511-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1511C-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1511F-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1511T-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1511TF-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1512C-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1513-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1513F-1 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1513pro-2 PN V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1515-2 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1515F-2 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1515T-2 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1515TF-2 PN V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP V2.9.8, V3.1.4
  • Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN V3.1.4

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-284-10 updated cvss 5.3

Siemens SIMATIC S7-1500 CPUs

show 19 more
  • Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) < 3.1.4 Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS < 21.9.8
    affected: fixed in V21.9.8 support.industry.siemens.com
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS < 31.1.4 Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS < 31.1.4
    affected: fixed in V31.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CL03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CM03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL01-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AL02-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1513-1 PN (6ES7513-1AM03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL01-0AB0) < 2.9.8 Siemens SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FL02-0AB0) < 2.9.8
    affected: fixed in V2.9.8 support.industry.siemens.com
  • Siemens SIMATIC S7-1500 CPU 1513F-1 PN (6ES7513-1FM03-0AB0) < 3.1.4 Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN (6ES7513-2GM03-0AB0) < 3.1.4
    affected: fixed in V3.1.4 support.industry.siemens.com

100 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.56% chance of exploitation in the next 30 days, higher than 46% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 4.0 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 4.0 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens SIMATIC Drive Controller CPU 1504D TF
  • Siemens SIMATIC Drive Controller CPU 1507D TF
  • Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
  • Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
  • Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
  • Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
  • Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN
  • Siemens SIMATIC ET 200SP CPU 1514SP-2 PN
  • Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN
  • Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS
  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS
  • Siemens SIMATIC S7-1500 CPU 1511-1 PN
  • Siemens SIMATIC S7-1500 CPU 1511C-1 PN
  • Siemens SIMATIC S7-1500 CPU 1511F-1 PN
  • Siemens SIMATIC S7-1500 CPU 1511T-1 PN
  • Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
  • Siemens SIMATIC S7-1500 CPU 1512C-1 PN
  • Siemens SIMATIC S7-1500 CPU 1513-1 PN
  • Siemens SIMATIC S7-1500 CPU 1513F-1 PN
  • Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN
  • Siemens SIMATIC S7-1500 CPU 1513pro-2 PN
  • Siemens SIMATIC S7-1500 CPU 1515-2 PN
  • Siemens SIMATIC S7-1500 CPU 1515F-2 PN
  • Siemens SIMATIC S7-1500 CPU 1515T-2 PN
  • Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
  • Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN
  • Siemens SIMATIC S7-1500 CPU 1516pro-2 PN
  • Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
  • Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP
  • Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP
  • Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK
  • Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK
  • Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN
  • Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN
  • Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN
  • Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN
  • Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V2

Classification

Weakness
  • CWE-288 Authentication Bypass Using an Alternate Path or Channel

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.