CVE-2024-36266: Siemens Powersys

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices.

Affected products

• Siemens Powersys: before 3.11 (fixed in 3.11)

Published 2024-06-11. Last modified 2026-06-17.