Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2026-24349

CVSS 7.1 · High EPSS 0.06% · P0

Possible ATT&CK Techniques 1AI

T1552.004 · Private Keys
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-24349

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC WinCC Unified PC Runtime V20 (All versions), SIMATIC WinCC Unified PC Runtime V21 (All versions < V21 Update 2). Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive information.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在文件或磁盘上的明文存储
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens SIMATIC WinCC Unified PC Runtime 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SIMATIC WinCC Unified PC Runtime是德国西门子（Siemens）公司的一款面向工业自动化和SCADA系统的人机界面与监控运行平台。 Siemens SIMATIC WinCC Unified PC Runtime V16版本、V17版本、V18版本、V19版本、V20版本和V21 Update 2之前版本存在安全漏洞，该漏洞源于WinCC证书管理器中密钥材料保护不足，可能导致攻击者提取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
SiemensSIMATIC WinCC Unified PC Runtime V16 0 ~ * -
SiemensSIMATIC WinCC Unified PC Runtime V17 0 ~ * -
SiemensSIMATIC WinCC Unified PC Runtime V18 0 ~ * -
SiemensSIMATIC WinCC Unified PC Runtime V19 0 ~ * -
SiemensSIMATIC WinCC Unified PC Runtime V20 0 ~ * -
SiemensSIMATIC WinCC Unified PC Runtime V21 0 ~ V21 Update 2 -

II. Public POCs for CVE-2026-24349

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-24349

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-24349 (1)

Same Patch Batch · Siemens · 2026-06-09 · 6 CVEs total

CVE-2026-467488.8 HIGHSiemens SINEC INS 安全漏洞
CVE-2026-467468.8 HIGHSiemens SINEC INS 操作系统命令注入漏洞
CVE-2026-467497.5 HIGHSiemens SINEC INS 安全漏洞
CVE-2025-408086.1 MEDIUMSiemens多款产品 代码问题漏洞
CVE-2026-467474.3 MEDIUMSiemens SINEC INS 安全漏洞

IV. Related Vulnerabilities

Same vendor: Siemens
Same weakness: CWE-313

V. Comments for CVE-2026-24349

No comments yet

Leave a comment