Aller au contenu
en Se connecter
8.8 Élevée

CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update…

Description

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC WinCC V7.5 Versions non publiées
SIMATIC WinCC V8.0 Versions non publiées
SIMATIC WinCC V8.1 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC WinCC V7.5

Les 19 CVE de SIMATIC WinCC V7.5 →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 Élevée CVE-2024-35783 A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All… 9.1 Critique CVE-2024-30321 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime… 5.9 Moyenne
Suivre cette CVE