← Back

CVE-2026-24349

nvd nist
Published: Jun 9, 2026Modified: Jun 26, 2026

JSON object

Loading...
8.2
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive information.

Affected (3)

Siemens
1 product
Simatic Wincc Unified Pc Runtime
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Simatic Wincc Unified Pc Runtime
From 16 to 20
Simatic Wincc Unified Pc Runtime
Version 21
Simatic Wincc Unified Pc Runtime
Version 21 update1

Related CWEs

CWE-313
Cleartext Storage in a File or on Disk
The product stores sensitive information in cleartext in a file, or on disk.

References (1)

Source: productcert@siemens.com
MitigationVendor Advisory

Timeline

No history available yet.