SSA-550198: Authenticated Remote Code Execution in WinCC
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-59241DE | high8.8 | — | ||
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- No fix availableSIMATIC WinCC V7.5
Currently no fix is available
- FixedSIMATIC WinCC V8.0
Update to V8.0 Update 11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109818723/ - FixedSIMATIC WinCC V8.1
Update to V8.1 Update 7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977191/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan