CVE-2023-27465

A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D425-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP (All versions >= V5.4 < V5.5 SP1), SIMOTION D435-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D445-2 DP/PN (All versions >= V5.4), SIMOTION D445-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D455-2 DP/PN (All versions >= V5.4 < V5.5 SP1), SIMOTION P320-4 E (All versions >= V5.4), SIMOTION P320-4 S (All versions >= V5.4). When operated with Security Level Low the device does not protect access to certain services relevant for debugging. This could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device.

• CWE-213
• CWE-200

• https://cert-portal.siemens.com/productcert/pdf/ssa-482956.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-482956.pdfPatch, Vendor Advisory

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2746The Rockwell Automation Enhanced HIM software contains an …9.6
• CVE-2023-27460Missing Authorization vulnerability in CodePeople, paypaldev…8.8
• CVE-2023-27461Cross-Site Request Forgery (CSRF) vulnerability in Yoohoo Pl…8.8
• CVE-2023-27462A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…4.3
• CVE-2023-27463A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…8.8
• CVE-2023-27464A vulnerability has been identified in Mendix Forgot Passwor…5.3
• CVE-2023-27469Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitra…7.1
• CVE-2023-2747The initialization vector (IV) used by the secure engine (SE…5.5
• CVE-2023-27470BASupSrvcUpdater.exe in N-able Take Control Agent through 7.…7
• CVE-2023-27471An issue was discovered in Insyde InsydeH2O with kernel 5.0 …5.5
• CVE-2023-27472 quickentity-editor-next is an open source, system local, vi…6.1
• CVE-2023-27474Directus is a real-time API and App dashboard for managing S…5.4