Debug Access Vulnerability in Siemens SIMOTION Products
CVE-2023-27465

4.6MEDIUM

Key Information:

Vendor

Siemens
Status
SIMOTION C240
SIMOTION C240 PN
SIMOTION D410-2 DP
SIMOTION D410-2 DP/PN
Vendor
CVE Published:
13 June 2023

What is CVE-2023-27465?

A security vulnerability has been discovered in various Siemens SIMOTION products that, when configured with a low security level, compromises access controls. Specifically, this flaw does not adequately secure certain services vital for debugging, enabling an unauthenticated attacker to retrieve sensitive technology object configurations from the affected devices. This raises significant security concerns for operational environments utilizing these systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SIMOTION C240 All versions >= V5.4 < V5.5 SP1

SIMOTION C240 PN All versions >= V5.4 < V5.5 SP1

SIMOTION D410-2 DP All versions >= V5.4 < V5.5 SP1

References

https://cert-portal.siemens.com/productcert/pdf/ssa-48295...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.