vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-27465

MEDIUM
4.6
CVSS Score
Published: June 13, 2023 at 08:17 AM UTC
Updated: October 24, 2026 at 01:10 PM UTC
14 products affected across 1 vendorSimotion P320-4s FirmwareSimotion P320-4e FirmwareSimotion D410-2 Dp /pn Firmware· also runs on 13 platforms

Using SIMOTION C240 by Siemens?

Get instant alerts when new vulnerabilities affect SIMOTION C240 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM4.6
Exploit prediction
EPSS 0.3%

Description

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Simotion C240 Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-c240 (same device)
Simotion C240 Pn Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-c240-pn (same device)
Simotion D410-2 Dp Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d410-2-dp (same device)
Simotion D410-2 Dp /pn Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d410-2-dp-pn (same device)
Simotion D425-2 Dp Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d425-2-dp (same device)
Simotion D425-2 Dp /pn Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d425-2-dp-pn (same device)
Simotion D435-2 Dp Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d435-2-dp (same device)
Simotion D435-2 Dp /pn Firmware· Siemens
95%
5.4 ≤ v < 5.55.5All versions >= V5.4 < V5.5 SP1
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d435-2-dp-pn (same device)
Simotion D445-2 Dp /pn (0aa0 ) Firmware· Siemens
95%
5.4
siemens-simotion-d445-2-dp-pn-0aa0 (same device)
Simotion D445-2 Dp /pn (0aa1 ) Firmware· Siemens
95%
5.4 ≤ v < 5.55.5
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
siemens-simotion-d445-2-dp-pn-0aa1 (same device)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

PatchVendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-482956.pdf

CVSS

4.6MEDIUMsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-213CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card