CVE-2023-27465

mediumpriority · track · 18EPSS 0.003 · 20 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.28% (20th) EPSS

CVSS 4.6 · medium

Is it mine?

87 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMOTION C240 (6AU1240-1AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION C240 PN (6AU1240-1AB00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)siemens_psirt
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION C240 (6AU1240-1AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION C240 PN (6AU1240-1AB00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
FixedSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)cisa_csaf_ot
Update to V5.5 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812773/
MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)siemens_psirt
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 (6AU1240-1AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION C240 PN (6AU1240-1AB00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP (6AU1410-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP (6AU1425-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP (6AU1435-2AA00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 E (6AU1320-4DE65-3AF0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
MitigationSIMOTION P320-4 S (6AU1320-4DS66-3AG0)cisa_csaf_ot
Restrict physical access to the device and avoid using Security Level Low (eg. Service Selector Switch in position 8, with simotion.ini or the PSTATE program - see Section 3.5 of SIMOTION IT - SIMOTION IT Diagnostics and Configuration Manual) in production environments
No fix plannedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)siemens_psirt
Currently no fix is planned
No fix plannedSIMOTION P320-4 E (6AU1320-4DE65-3AF0)siemens_psirt
Currently no fix is planned
No fix plannedSIMOTION P320-4 S (6AU1320-4DS66-3AG0)siemens_psirt
Currently no fix is planned
No fix plannedSIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMOTION P320-4 E (6AU1320-4DE65-3AF0)cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMOTION P320-4 S (6AU1320-4DS66-3AG0)cisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

4.6

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 0.9 · impact 3.6

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.14.6mediumAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · ENISA EU

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · productcert@siemens.com DEexploitability 0.9 · impact 3.6

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.14.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USprimaryCWE-213USCWE-213USCWE-213USCWE-213US

affected products (87)

Products and version ranges known to be affected.

SIMOTION C240 (6AU1240-1AA00-0AA0)all versionscisa_csaf_otUS
SIMOTION C240 PN (6AU1240-1AB00-0AA0)all versionscisa_csaf_otUS
SIMOTION D410-2 DP (6AU1410-2AA00-0AA0)all versionscisa_csaf_otUS
SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)all versionscisa_csaf_otUS
SIMOTION D425-2 DP (6AU1425-2AA00-0AA0)all versionscisa_csaf_otUS
SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)all versionscisa_csaf_otUS
SIMOTION D435-2 DP (6AU1435-2AA00-0AA0)all versionscisa_csaf_otUS
SIMOTION D435-2 DP/PN (6AU1435-2AD00-0AA0)all versionscisa_csaf_otUS
SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA0)all versionscisa_csaf_otUS
SIMOTION D445-2 DP/PN (6AU1445-2AD00-0AA1)all versionscisa_csaf_otUS
SIMOTION D455-2 DP/PN (6AU1455-2AD00-0AA0)all versionscisa_csaf_otUS
SIMOTION P320-4 E (6AU1320-4DE65-3AF0)all versionscisa_csaf_otUS
SIMOTION P320-4 S (6AU1320-4DS66-3AG0)all versionscisa_csaf_otUS
Siemens SIMOTION C240 (6AU1240-1AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION C240 PN (6AU1240-1AB00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D410-2 DP (6AU1410-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D410-2 DP/PN (6AU1410-2AD00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D425-2 DP (6AU1425-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D425-2 DP/PN (6AU1425-2AD00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS
Siemens SIMOTION D435-2 DP (6AU1435-2AA00-0AA0)vers:/_V5.4 → V5.5_SP1cisa_csaf_otUS

showing 20 of 87

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-482956SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.52023-06-13csaf · siemens_psirtDE
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-23-166-04Siemens SIMOTION2023-06-13icsa · cisa_csaf_otUS
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2023-06-13modified 2026-10-24

related (19,389)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-20133US	high7.5OT critical	31.5% (98th)	KEV	2026-02-25
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due…
CVE-2026-20128US	—OT critical	7.32% (94th)	KEV	2026-02-25
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect…
CVE-2026-20122US	medium5.4OT critical	25.8% (98th)	KEV	2026-02-25
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vul…
CVE-2025-68686US	—OT critical	29.5% (98th)	KEV	2026-02-10
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.…
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	2026-01-13
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

+19384 more

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan