What is CVE-2026-24349?

CVE-2026-24349 is a high-severity vulnerability in Siemens Simatic_wincc_unified_pc_runtime, classified under Cleartext Storage in a File or on Disk. CVSS score: 7.1/10. Published 2026-06-09.

How severe is CVE-2026-24349?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Siemens Simatic_wincc_unified_pc_runtime

CVE-2026-24349

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All…

EPSS: 0.001 (0.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Affected products

Siemens Simatic_wincc_unified_pc_runtime — versions 21
Siemens Simatic Wincc Unified Pc Runtime V16 — versions 0
Siemens Simatic Wincc Unified Pc Runtime V17 — versions 0
Siemens Simatic Wincc Unified Pc Runtime V18 — versions 0
Siemens Simatic Wincc Unified Pc Runtime V19 — versions 0
Siemens Simatic Wincc Unified Pc Runtime V20 — versions 0
Siemens Simatic Wincc Unified Pc Runtime V21 — versions 0

Weakness classification (CWE)

CWE-313 — Cleartext Storage in a File or on Disk

References

productcert@siemens.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2026-24349?: CVE-2026-24349 is a high-severity vulnerability in Siemens Simatic_wincc_unified_pc_runtime, classified under Cleartext Storage in a File or on Disk. CVSS score: 7.1/10. Published 2026-06-09.
How severe is CVE-2026-24349?: High severity. CVSS v3 base score is 7.1 out of 10.