IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SSA-550198: Authenticated Remote Code Execution in WinCC

HIGH
CVSS 8.8
Date 2026-10-13T00:00:00+00:00
Source siemens-productcert
Published by Siemens ProductCERT

// Description

Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2026-59241 8.8 high
CVE-2026-59241. The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.

// Affected Products (3)

Vendor Product Asset Type Purdue Level Firmware
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--
Siemens Unknown hmi
L2
--

// Remediations (2)

Patch: Update to V8.0 Update 11 or later version
Update to V8.0 Update 11 or later version
Patch: Update to V8.1 Update 7 or later version
Update to V8.1 Update 7 or later version

// References