Siemens SIMATIC S7 PLC Web Server Improper Neutralization of Input During Web Page Generation (CVE-2026-25789)

high Tenable OT Security Plugin ID 505540

Version 1.4

Jul 15, 2026, 7:54 AM

  • CVSS metrics ("Cvssv4 score" set to 7.2)
  • CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U")
  • CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H")

Plugin Feed: 202607150754