This vulnerability involves improper sanitization of trace file contents in Siemens SIMATIC Drive Controller CPU 1504D TF. An attacker can leverage social engineering to convince an authorized user to import a malicious trace file. The malicious code embedded in the trace file is executed in the client's browser session, allowing unauthorized PLC operations to be triggered through the webserver under the legitimate user's permissions. The issue is categorized as CWE-95 (Eval Injection) and has a CVSS v3.1 base score of 9.6, indicating critical severity.

Successful exploitation allows remote code execution in the context of the authorized user's browser session, leading to potentially complete compromise of PLC operations accessible to that user. This includes confidentiality, integrity, and availability impacts rated as high. The attacker can cause unauthorized control actions on the industrial controller via the webserver interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict the 'Read diagnostics' function right to trusted users only and avoid importing trace files from untrusted sources. Monitor Siemens advisories for updates on official patches or mitigations.