Description
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC WinCC V8.1 | 0 <* | — |
| Siemens | SIMATIC WinCC V8.0 | 0 <* | — |
| Siemens | SIMATIC WinCC V7.5 | 0 <* | — |
Advisories 2
- WID-SEC-2026-4442 Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 10, 2026
- SSA-979641 SSA-979641: Implicit Execution of Active Content when Opening Files Vulnerability in SIMATIC WinCC Graphics Designer Siemens ProductCERT · Nov 10, 2026