CVE-2023-27465

mediumPriorität · verfolgen · 18EPSS 0.003 · 20. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.28% (20th) EPSS

CVSS 4.6 · medium

Is it mine?

87 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMOTION C240 (6AU1240-1AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION C240 PN (6AU1240-1AB00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION C240 (6AU1240-1AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION C240 PN (6AU1240-1AB00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
BehobenSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
Kein Fix geplantSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMOTION P320-4 E (6AU1320-4DE65-3AF0)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMOTION P320-4 S (6AU1320-4DS66-3AG0)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMOTION P320-4 E (6AU1320-4DE65-3AF0)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMOTION P320-4 S (6AU1320-4DS66-3AG0)cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.6

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 0.9 · Auswirkung 3.6

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.14.6mediumAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · ENISA EU

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · productcert@siemens.com DEAusnutzbarkeit 0.9 · Auswirkung 3.6

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.14.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-200USprimärCWE-213USCWE-213USCWE-213USCWE-213US

betroffene Produkte (87)

Betroffene Produkte und Versionsbereiche.

SIMOTION C240 (6AU1240-1AA00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION C240 PN (6AU1240-1AB00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D410-2 DP (6AU1410-2AA00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D425-2 DP (6AU1425-2AA00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D435-2 DP (6AU1435-2AA00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)alle Versionencisa_csaf_otUS
SIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)alle Versionencisa_csaf_otUS
SIMOTION P320-4 E (6AU1320-4DE65-3AF0)alle Versionencisa_csaf_otUS
SIMOTION P320-4 S (6AU1320-4DS66-3AG0)alle Versionencisa_csaf_otUS
Siemens SIMOTION C240 (6AU1240-1AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION C240 PN (6AU1240-1AB00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D410-2 DP (6AU1410-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D425-2 DP (6AU1425-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D435-2 DP (6AU1435-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS

20 von 87 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-482956SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.52023-06-13csaf · siemens_psirtDE
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-23-166-04Siemens SIMOTION2023-06-13icsa · cisa_csaf_otUS
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2023-06-13geändert 2026-10-24

verwandt (19,389)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-20133US	high7.5OT kritisch	31.5% (98th)	KEV	2026-02-25
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due…
CVE-2026-20128US	—OT kritisch	7.32% (94th)	KEV	2026-02-25
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect…
CVE-2026-20122US	medium5.4OT kritisch	25.8% (98th)	KEV	2026-02-25
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vul…
CVE-2025-68686US	—OT kritisch	29.5% (98th)	KEV	2026-02-10
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.…
CVE-2026-20805US	—OT kritisch	7.46% (94th)	KEV	2026-01-13
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

+19384 weitere

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan