This vulnerability (CWE-79) in Siemens SIMATIC Drive Controller CPU 1504D TF involves improper neutralization of input during web page generation. Specifically, the PLC/station name rendered on the communication parameters page is not properly sanitized, allowing an authenticated attacker authorized to download TIA projects to inject malicious scripts. These scripts execute in the context of other users' web sessions who access the affected page, enabling potential full compromise of the device's web interface. The CVSS 3.1 base score is 9.1 (critical), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by Siemens as of the vulnerability disclosure date.

Successful exploitation allows an attacker with authenticated access and high privileges to inject and execute arbitrary scripts in the web interface of the Siemens SIMATIC Drive Controller CPU 1504D TF. This can lead to full compromise of the device's confidentiality, integrity, and availability, potentially affecting control and monitoring of industrial processes. The vulnerability requires authentication and appropriate rights, limiting exposure to authorized users. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's web interface to trusted administrators only. Monitor for unusual activity from authenticated users with rights to download TIA projects. Avoid using the communication parameters page for non-essential purposes to reduce exposure.