A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-482956.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
Configuration 11 (hide)
| AND |
|
Configuration 12 (hide)
| AND |
|
Configuration 13 (hide)
| AND |
|
History
05 Jul 2023, 17:48
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.6 |
| CPE | cpe:2.3:o:siemens:simotion_c240_pn_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d435-2_dp\/pn_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d425-2_dp_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d425-2_dp\/pn:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d435-2_dp:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d410-2_dp_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d445-2_dp\/pn_\(0aa1\)_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d425-2_dp\/pn_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_c240_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d410-2_dp_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d455-2_dp\/pn_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_p320-4_e:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d445-2_dp\/pn_\(0aa1\):-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d425-2_dp:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d435-2_dp_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_c240:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d445-2_dp\/pn_\(0aa0\):-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d425-2_dp\/pn_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d425-2_dp_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d435-2_dp\/pn:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_p320-4_s_firmware:5.4:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d410-2_dp\/pn:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_p320-4_e_firmware:5.4:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d435-2_dp_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d445-2_dp\/pn_\(0aa0\)_firmware:5.4:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_c240_pn:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d410-2_dp\/pn_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d455-2_dp\/pn:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_d410-2_dp:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d410-2_dp\/pn_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_c240_pn_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d435-2_dp\/pn_firmware:5.5:-:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_c240_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simotion_p320-4_s:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d455-2_dp\/pn_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simotion_d445-2_dp\/pn_\(0aa1\)_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Siemens simotion P320-4 E Firmware
Siemens simotion D425-2 Dp\/pn Firmware Siemens simotion C240 Pn Siemens simotion C240 Pn Firmware Siemens simotion D445-2 Dp\/pn \(0aa1\) Firmware Siemens simotion D410-2 Dp Firmware Siemens simotion C240 Siemens simotion P320-4 S Firmware Siemens simotion D410-2 Dp\/pn Siemens simotion D445-2 Dp\/pn \(0aa1\) Siemens simotion P320-4 E Siemens simotion D425-2 Dp\/pn Siemens simotion D445-2 Dp\/pn \(0aa0\) Firmware Siemens simotion D410-2 Dp\/pn Firmware Siemens Siemens simotion D455-2 Dp\/pn Siemens simotion D425-2 Dp Firmware Siemens simotion D425-2 Dp Siemens simotion D435-2 Dp\/pn Siemens simotion D435-2 Dp Firmware Siemens simotion D435-2 Dp Siemens simotion D435-2 Dp\/pn Firmware Siemens simotion C240 Firmware Siemens simotion D445-2 Dp\/pn \(0aa0\) Siemens simotion D410-2 Dp Siemens simotion P320-4 S Siemens simotion D455-2 Dp\/pn Firmware |
|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-482956.pdf - Patch, Vendor Advisory |
13 Jun 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 09:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-27465
Mitre link : CVE-2023-27465
CVE.ORG link : CVE-2023-27465
JSON object : View
Products Affected
siemens
- simotion_c240_firmware
- simotion_d445-2_dp\/pn_\(0aa0\)_firmware
- simotion_p320-4_e
- simotion_d455-2_dp\/pn
- simotion_d445-2_dp\/pn_\(0aa0\)
- simotion_d435-2_dp
- simotion_d425-2_dp_firmware
- simotion_d455-2_dp\/pn_firmware
- simotion_c240
- simotion_c240_pn
- simotion_d435-2_dp\/pn
- simotion_p320-4_e_firmware
- simotion_d435-2_dp_firmware
- simotion_d410-2_dp
- simotion_d445-2_dp\/pn_\(0aa1\)_firmware
- simotion_d445-2_dp\/pn_\(0aa1\)
- simotion_d410-2_dp\/pn_firmware
- simotion_d425-2_dp\/pn
- simotion_p320-4_s_firmware
- simotion_d410-2_dp\/pn
- simotion_c240_pn_firmware
- simotion_d435-2_dp\/pn_firmware
- simotion_d410-2_dp_firmware
- simotion_p320-4_s
- simotion_d425-2_dp
- simotion_d425-2_dp\/pn_firmware