Skip to content
Fencer Vulns
medium 4.6

CVE-2023-27465 json

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1),…

published 2023-06-13 3 y ago modified 2026-10-24 15 d ago also EUVD-2023-31241

cvss
4.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 20%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

Patch / fix

  • siemens simotion_d425-2_dp_firmware 5.5
  • siemens simotion_d425-2_dp/pn_firmware 5.5
  • siemens simotion_d435-2_dp_firmware 5.5
  • siemens simotion_d435-2_dp/pn_firmware 5.5
  • siemens simotion_d445-2_dp/pn_(0aa1)_firmware 5.5
  • siemens simotion_d455-2_dp/pn_firmware 5.5
  • siemens simotion_d410-2_dp_firmware 5.5
  • siemens simotion_d410-2_dp/pn_firmware 5.5
  • siemens simotion_c240_pn_firmware 5.5
  • siemens simotion_c240_firmware 5.5

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-166-04 updated cvss 4.6

Siemens SIMOTION

  • Siemens SIMOTION C240 (6AU1240-1AA00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION C240 PN (6AU1240-1AB00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D410-2 DP (6AU1410-2AA00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D425-2 DP (6AU1425-2AA00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0) >=vers:/_V5.4<V5.5_SP1
    +2 more products
    Siemens SIMOTION D435-2 DP (6AU1435-2AA00-0AA0) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0) >=vers:/_V5.4<V5.5_SP1
    affected: fixed in V5.5, mitigation support.industry.siemens.com
  • Siemens SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0) >=V5.4
    affected: mitigation, no fix planned
  • Siemens SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1) >=vers:/_V5.4<V5.5_SP1 Siemens SIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0) >=vers:/_V5.4<V5.5_SP1
    affected: fixed in V5.5, mitigation support.industry.siemens.com
  • Siemens SIMOTION P320-4 E (6AU1320-4DE65-3AF0) >=V5.4 Siemens SIMOTION P320-4 S (6AU1320-4DS66-3AG0) >=V5.4
    affected: mitigation, no fix planned

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CNA 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

  • Siemens SIMOTION C240
  • Siemens SIMOTION C240 PN
  • Siemens SIMOTION D410-2 DP
  • Siemens SIMOTION D410-2 DP/PN
  • Siemens SIMOTION D425-2 DP
  • Siemens SIMOTION D425-2 DP/PN
  • Siemens SIMOTION D435-2 DP
  • Siemens SIMOTION D435-2 DP/PN
  • Siemens SIMOTION D445-2 DP/PN
  • Siemens SIMOTION D455-2 DP/PN
  • Siemens SIMOTION P320-4 E
  • Siemens SIMOTION P320-4 S

Classification

Weakness
  • CWE-213 Exposure of Sensitive Information Due to Incompatible Policies
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.