Siemens SIMOTION
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-27465US | medium4.6 | — | ||
A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4… | ||||
references
External citations — patches, advisories, analysis.
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - CSAF Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - HTML Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - PDF Versionself
- SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5 - TXT Versionself
- ICS Advisory ICSA-23-166-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-166-04 - Web Versionself
- Recommended Practicesexternal
remediations (26)
- MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
- No fix plannedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)
Currently no fix is planned
- No fix plannedSIMOTION P320-4 E (6AU1320-4DE65-3AF0)
Currently no fix is planned
- No fix plannedSIMOTION P320-4 S (6AU1320-4DS66-3AG0)
Currently no fix is planned
- FixedSIMOTION C240 (6AU1240-1AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION C240 PN (6AU1240-1AB00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/ - FixedSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan