VULNERABILITY INTELLIGENCE

CVE-2026-24349

CVSS score7.1 HIGH
EPSS probability0.06%
CISA KEVNot currently listed
Published2026-06-09
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive information.

Weakness classification

  • productcert@siemens.com: CWE-313

Primary references