目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2026-25787— Siemens SIMATIC 跨站脚本漏洞

一分钟漏洞结论

影响对象
Siemens SIMATIC Drive Controller CPU 1504D TF
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Siemens SIMATIC是德国西门子（Siemens）公司的一系列面向工业自动化与过程控制场景的可编程控制与工业软件产品。 Siemens SIMATIC存在跨站脚本漏洞，该漏洞源于Web界面运动控制诊断页面未正确验证和清理技术对象名称，可能导致经过身份验证的攻击者注入恶意脚本，当具有适当权限的用户访问该页面时，恶意代码将在其Web会话中执行。以下产品受到影响：SIMATIC Drive Controller CPU 1504D TF、SIMATIC Drive Controller CPU 150

CVSS 9.1 · Critical EPSS 0.54% · P43

影响版本矩阵 175

厂商产品 版本范围状态
Siemens SIMATIC Drive Controller CPU 1504D TF < V3.1.6 affected
Siemens SIMATIC Drive Controller CPU 1507D TF < V3.1.6 affected
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN < * affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN < * affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN < * affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN < * affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN < V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN < V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN < V4.1.6 affected
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN < V4.1.6 affected
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) < * affected
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs < * affected
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs < * affected
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs < * affected
Siemens SIMATIC S7-1500 CPU 1511-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1511C-1 PN < V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1511F-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1511T-1 PN < V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN < V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1512C-1 PN < V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1513-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1513F-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1513pro F-2 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1513pro-2 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1515-2 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1515F-2 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1515T-2 PN < V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN < V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP < * affected
< V2.9.9 affected
< V2.9.9 affected
< V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516pro F-2 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516pro-2 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516T-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516TF-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517F-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP < V3.1.6 affected
< V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517T-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517TF-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP < V3.1.6 affected
< V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518F-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP < V3.1.6 affected
< V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518T-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518TF-3 PN < V4.1.6 affected
Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP < V3.1.6 affected
Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK < * affected
Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK < * affected
Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN < V2.9.9 affected
Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN < V2.9.9 affected
Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN < V2.9.9 affected
Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN < V2.9.9 affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V2 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S F V4 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V2 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1507S V4 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V2 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S F V4 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S T V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S TF V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V2 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V3 < * affected
Siemens SIMATIC S7-1500 Software Controller CPU 1508S V4 < * affected
Siemens SIMATIC S7-1500 Software Controller Linux V2 < * affected
Siemens SIMATIC S7-1500 Software Controller Linux V3 < * affected
Siemens SIMATIC S7-PLCSIM Advanced < * affected
Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN < V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL < V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1510SP-1 PN < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1512SP-1 PN < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1511-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1511F-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1513-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1513F-1 PN < * affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1515F-2 PN < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL < V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL < V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP < * affected
< * affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL < V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL < V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP < * affected
< V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL < V2.9.9 affected
< V2.9.9 affected
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP < V3.1.6 affected
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP < V3.1.6 affected
Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP < V3.1.6 affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-25787 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a benign user with appropriate rights accesses the "Motion Control Diagnostics" parameters page, the malicious code would be executed in the scope of their web session.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
来源: CVE Program / CVE List V5
Vulnerability Title
Siemens SIMATIC 跨站脚本漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Siemens SIMATIC是德国西门子（Siemens）公司的一系列面向工业自动化与过程控制场景的可编程控制与工业软件产品。 Siemens SIMATIC存在跨站脚本漏洞，该漏洞源于Web界面运动控制诊断页面未正确验证和清理技术对象名称，可能导致经过身份验证的攻击者注入恶意脚本，当具有适当权限的用户访问该页面时，恶意代码将在其Web会话中执行。以下产品受到影响：SIMATIC Drive Controller CPU 1504D TF、SIMATIC Drive Controller CPU 150
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
Siemens SIMATIC Drive Controller CPU 1504D TF 0 ~ V3.1.6 -
Siemens SIMATIC Drive Controller CPU 1507D TF 0 ~ V3.1.6 -
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 ~ * -
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 ~ * -
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 ~ * -
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 ~ * -
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN 0 ~ V4.1.6 -
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) 0 ~ * -
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs 0 ~ * -
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs 0 ~ * -
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC3 V4 CPUs 0 ~ * -
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 ~ * -
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0 ~ V2.9.9 -
Siemens SIMATIC S7-1500 CPU 1511C-1 PN 0 ~ V4.1.6 -
Siemens SIMATIC S7-1500 CPU 1511F-1 PN 0 ~ * -

二、漏洞 CVE-2026-25787 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-25787 的情报信息

请登录查看更多情报信息。

CVE-2026-25787 厂商安全公告 (1)

同批安全公告 · Siemens · 2026-05-12 · 共 20 条

CVE-2025-40949 9.1 CRITICAL Siemens多款产品 操作系统命令注入漏洞
CVE-2026-22924 9.1 CRITICAL Siemens SIMATIC CN 4100 访问控制错误漏洞
CVE-2026-25786 9.1 CRITICAL Siemens多款产品 跨站脚本漏洞
CVE-2026-41551 9.1 CRITICAL Siemens ROS# 安全漏洞
CVE-2025-40946 8.3 HIGH Siemens多款产品 安全漏洞
CVE-2025-12659 7.8 HIGH Siemens Simcenter Femap 安全漏洞
CVE-2026-44412 7.8 HIGH Siemens Solid Edge 安全漏洞
CVE-2026-44411 7.8 HIGH Siemens Solid Edge 缓冲区错误漏洞
CVE-2026-27662 7.7 HIGH Siemens SIMATIC HMI Comfort Panels 安全漏洞
CVE-2025-40833 7.5 HIGH Siemens多款产品 代码问题漏洞
CVE-2025-40947 7.5 HIGH Siemens RUGGEDCOM 操作系统命令注入漏洞
CVE-2026-22925 7.5 HIGH Siemens SIMATIC CN 4100 安全漏洞
CVE-2026-33893 7.5 HIGH Siemens多款产品 信任管理问题漏洞
CVE-2026-33862 7.3 HIGH Siemens Teamcenter 跨站脚本漏洞
CVE-2026-25789 7.1 HIGH Siemens多款产品 跨站脚本漏洞
CVE-2025-40948 6.8 MEDIUM Siemens多款产品 参数注入漏洞
CVE-2026-41125 6.0 MEDIUM Siemens多款产品 SQL注入漏洞
CVE-2024-54017 5.3 MEDIUM Siemens SIPROTEC 5 安全漏洞
CVE-2026-42177 5.3 MEDIUM Entra ID SSO via Microsoft Identity Broker on Linux 访问控制错误漏洞

IV. Related Vulnerabilities

Same product: SIMATIC Drive Controller CPU 1504D TF
Same vendor: Siemens
Same weakness: CWE-79

V. Comments for CVE-2026-25787

暂无评论

发表评论