The vulnerability allows an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries, caused by improper input bound validation. This out‑of‑bounds read can expose sensitive data stored in memory, potentially leading to partial disclosure of confidential information. The weakness corresponds to the CWE‑125 vulnerability class.

Affected products are Siemens Capital Embedded AR Classic 431‑422 (all versions), Capital Embedded AR Classic R20‑11 (all versions < V2303), and a series of Desigo models including PXC00‑E.D, PXC00‑U, PXC001‑E.D, PXC100‑E.D, PXC12‑E.D, PXC128‑U, PXC200‑E.D, PXC22‑E.D, PXC22.1‑E.D, PXC36.1‑E.D, PXC50‑E.D, PXC64‑U, and PXM20‑E (all versions >= V2.3).

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no documented active exploits yet. Based on the description, the likely attack vector is a remote network attacker sending crafted packets to a vulnerable device; authentication is not required, but the attacker must be able to reach the target over the network.