Back to CVE records
Medium 4.6Published Jun 13, 2023

CVE-2023-27465A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOT…

Updated under an hour ago ()

Does this affect you?

It affects siemens simotion_d425-2_dp_firmware and 12 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

CVSS
4.6 MEDIUM (v3.1, NVD)CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE)
CWE-213, CWE-200
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Not given
NVD analysis
Modified
Record last updated
Oct 24, 2026
First seen by InfoSec Signals
Oct 24, 2026

Affected products

Affected products
siemens simotion_d425-2_dp_firmware
siemens:simotion_d425-2_dp_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_d425-2_dp/pn_firmware
siemens:simotion_d425-2_dp/pn_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_d435-2_dp_firmware
siemens:simotion_d435-2_dp_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_d435-2_dp/pn_firmware
siemens:simotion_d435-2_dp/pn_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_d445-2_dp/pn_(0aa1)_firmware
siemens:simotion_d445-2_dp/pn_(0aa1)_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_d445-2_dp/pn_(0aa0)_firmware
siemens:simotion_d445-2_dp/pn_(0aa0)_firmware
5.4
NVD
siemens simotion_d455-2_dp/pn_firmware
siemens:simotion_d455-2_dp/pn_firmware
from 5.4 before 5.5; 5.5
NVD
siemens simotion_p320-4_e_firmware
siemens:simotion_p320-4_e_firmware
5.4
NVD
siemens simotion_p320-4_s_firmware
siemens:simotion_p320-4_s_firmware
5.4
NVD
siemens simotion_d410-2_dp_firmware
siemens:simotion_d410-2_dp_firmware
from 5.4 before 5.5; 5.5
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.