Vulnerabilities

CVSS

7.1 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Risk score

56.8

Published

2026-06-09

Status

Published

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive information.

Weaknesses

CWE-313

Coverage 1

vulnerability

Siemens WinCC Certificate Manager

A vulnerability has been identified in Siemens WinCC Certificate Manager, specifically versions V16 through V21, that allows an attacker to potentially extract sensitive information due to insufficient protection of key…

CISA Advisories · Jun 23, 2026 High

CVE-2026-24349GEcertificatekey managementindustrial control systems

All articles mentioning it

Advisories and references

• cert-portal.siemens.com/productcert/html/ssa-063511.html