High SSA-063511 1 CVE

SSA-063511: Insufficient protection of key material in WinCC Certificate Manager

Published Jun 9, 2026 · Updated Jun 9, 2026

Vendor: Siemens Product: SIMATIC WinCC Unified PC Runtime V16 Product: SIMATIC WinCC Unified PC Runtime V17 Product: SIMATIC WinCC Unified PC Runtime V18 Product: SIMATIC WinCC Unified PC Runtime V19 Product: SIMATIC WinCC Unified PC Runtime V20 Product: SIMATIC WinCC Unified PC Runtime V21

Summary

WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information.

Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

High 7.1

CVE-2026-24349

A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Ru…

Siemens SIMATIC WinCC Unified PC Runtime V18 SIMATIC WinCC Unified PC Runtime V19 SIMATIC WinCC Unified PC Runtime V21 ICS / OT

Jun 9, 2026

Revision history

2026-06-09 #1
Publication Date

References

SSA-063511: Insufficient protection of key material in WinCC Certificate Manager - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-063511.html