Description
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role.
This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
Published: 2026-10-13
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Privilege Escalation
Action: Patch Now
AI Analysis

Impact

The vulnerability arises from insufficient restriction of permissions on a database role within Siemens SIMATIC WinCC. An authenticated attacker who can reach the database can elevate their privileges to the level of the host system and execute arbitrary commands, potentially compromising the entire system.

Affected Systems

The issue affects Siemens SIMATIC WinCC V7.5 (all versions), V8.0 (all versions before Update 11) and V8.1 (all versions before Update 7). These products are commonly used in industrial control environments where multiple users may have database access.

Risk and Exploitability

With a CVSS score of 8.7 the vulnerability is classified as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is an authenticated remote attacker who has database access. Exploitation requires only legitimate database credentials and does not rely on additional external conditions, making it feasible in typical production deployments that expose database ports to trusted networks.

Generated by OpenCVE AI on October 13, 2026 at 10:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Siemens WinCC update that resolves the role permission issue (e.g., V8.0 Update 11 or later, V8.1 Update 7 or later, or the latest V7.5 build).
  • Reconfigure database accounts to follow the principle of least privilege, removing any elevated roles that are unnecessary for normal operation.
  • Restrict remote database connectivity so that only trusted hosts can connect, and enforce strong, multi‑factor authentication if possible.

Generated by OpenCVE AI on October 13, 2026 at 10:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 10:45:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Improper Role Permissions in Siemens SIMATIC WinCC

Tue, 13 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.
Weaknesses CWE-266
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2026-10-13T09:18:29.536Z

Reserved: 2026-07-03T14:16:52.881Z

Link: CVE-2026-59241

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-13T10:17:16.623

Modified: 2026-10-13T10:17:16.623

Link: CVE-2026-59241

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T10:30:19Z

Weaknesses
  • CWE-266

    Incorrect Privilege Assignment