Siemens WinCC
Plan PatchCVSS 8.8ICS-CERT ICSA-26-295-13Oct 13, 2026
Siemens
Attack path
Attack VectorNetwork
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available.
What this means
What could happen
Could allow full system compromise: read data, modify settings, and disrupt operations
Who's at risk
Organizations in critical infrastructure using Siemens equipment
How it could be exploited
Attacker on the corporate network or internet could reach this device with basic access credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited - EPSS score 0.5%
Affected products (3)
2 with fix1 pending
ProductAffected VersionsFix Status
SIMATIC WinCC V7.5All versionsNo fix yet
Remediation & Mitigation
0/2
Schedule - requires maintenance window
0/2Patching may require device reboot, plan for process interruption
UPGRADEUpdate to V8.0 Update 11 or later version
UPGRADEUpdate to V8.1 Update 7 or later version
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/d5a9e2ca-963a-4dae-a156-e3310e78cbf3Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.