Machine-generated analysis · WAYSCloud LLM
All listed SIMATIC S7-1500 PLC models are affected by eight web-server vulnerabilities (CVE-2026-63350 through CVE-2026-63357).
Context
The advisory concerns Siemens SIMATIC S7-1500 PLCs, specifically the Drive Controller CPU 1504D/1507D and various ET 200SP CPU models. Siemens states the web server flaws could enable malicious code execution in an authorized user’s browser session and allow PLC operations within that user’s permissions. Siemens is preparing fixes and recommends interim mitigations for devices where patches are not yet available.
Operator considerations
Check inventory for the listed CPU models and verify their firmware versions.
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
Read the full advisory on CISA →