Dashboard / CVE-2023-27465

CVE-2023-27465

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 44/100
Published: 2023-06-13 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

Weakness Classification (2)

Affected Software (23)

VendorProductVersion
siemens simotion_c240_firmware 5.4 – 5.5
siemens simotion_c240_firmware 5.5
siemens simotion_c240_pn_firmware 5.4 – 5.5
siemens simotion_c240_pn_firmware 5.5
siemens simotion_d410-2_dp\/pn_firmware 5.4 – 5.5
siemens simotion_d410-2_dp\/pn_firmware 5.5
siemens simotion_d410-2_dp_firmware 5.4 – 5.5
siemens simotion_d410-2_dp_firmware 5.5
siemens simotion_d425-2_dp\/pn_firmware 5.4 – 5.5
siemens simotion_d425-2_dp\/pn_firmware 5.5
siemens simotion_d425-2_dp_firmware 5.4 – 5.5
siemens simotion_d425-2_dp_firmware 5.5
siemens simotion_d435-2_dp\/pn_firmware 5.4 – 5.5
siemens simotion_d435-2_dp\/pn_firmware 5.5
siemens simotion_d435-2_dp_firmware 5.4 – 5.5
siemens simotion_d435-2_dp_firmware 5.5
siemens simotion_d445-2_dp\/pn_\(0aa0\)_firmware 5.4
siemens simotion_d445-2_dp\/pn_\(0aa1\)_firmware 5.4 – 5.5
siemens simotion_d445-2_dp\/pn_\(0aa1\)_firmware 5.5
siemens simotion_d455-2_dp\/pn_firmware 5.4 – 5.5
siemens simotion_d455-2_dp\/pn_firmware 5.5
siemens simotion_p320-4_e_firmware 5.4
siemens simotion_p320-4_s_firmware 5.4

References & Advisories (1)

Bug Bounty Relevance

44 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

4.6 / 10.0 v3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.28%
Raw Score 0.002760
Percentile 20.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00276
2026-10-28
0.00276

Intelligence Sources

nvd ref →

External Links