CYBER CODE RED

Get real-time updates on Telegram

P5

CVE-2023-27465: simotion d425-2 dp firmware 5.5; +24 more affected products

CVE-2023-27465. CVSS 3.1 base score 4.6 (MEDIUM, NVD). EPSS 0.00276 (percentile 0.18989), scored 22-Oct-2026.

Affected technology

simotion d425-2 dp firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d425-2 dp firmware · 5.5
siemens

simotion d425-2 dp/pn firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d425-2 dp/pn firmware · 5.5
siemens

simotion d435-2 dp firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d435-2 dp firmware · 5.5
siemens

simotion d435-2 dp/pn firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d435-2 dp/pn firmware · 5.5
siemens

simotion d445-2 dp/pn (0aa1) firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d445-2 dp/pn (0aa1) firmware · 5.5
siemens

simotion d445-2 dp/pn (0aa0) firmware · 5.4
siemens

simotion d455-2 dp/pn firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d455-2 dp/pn firmware · 5.5
siemens

simotion p320-4 e firmware · 5.4
siemens

simotion p320-4 s firmware · 5.4
siemens

simotion d410-2 dp firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d410-2 dp firmware · 5.5
siemens

simotion d410-2 dp/pn firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion d410-2 dp/pn firmware · 5.5
siemens

simotion c240 pn firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion c240 pn firmware · 5.5
siemens

simotion c240 firmware · from 5.4 (inclusive), before 5.5 (exclusive)
siemens

simotion c240 firmware · 5.5
siemens

SIMOTION C240 · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION C240 PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D410-2 DP · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D410-2 DP/PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D425-2 DP · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D425-2 DP/PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D435-2 DP · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D435-2 DP/PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D445-2 DP/PN · All versions >= V5.4
Siemens

SIMOTION D445-2 DP/PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION D455-2 DP/PN · All versions >= V5.4 < V5.5 SP1
Siemens

SIMOTION P320-4 E · All versions >= V5.4
Siemens

SIMOTION P320-4 S · All versions >= V5.4
Siemens

Description’s affected range: versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (Al

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Physical access · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Physical access · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker could extract confidential technology object (TO) configuration from the device. Vendor/CNA’s CVSS 3.1 assessment (base score 4.6/10) rates confidentiality impact as high; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 4.6/10) rates confidentiality impact as high; integrity and availability impact as none.

Published

CWE
CWE-200, CWE-213
CCR priority
18.5 /100 (P5)
CVSS 3.1
4.6 /10 · CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · NVD
EPSS
0.00276 · percentile 0.19058 · 2026-10-24
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2023-27465.html