CVEvulnerability

CVE-2013-6920

10.0 HIGH Published 2013-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Affected configurations

• siemens sinamics s\/g family firmware (<= 4.6) • siemens sinamics g110 • siemens sinamics g110d • siemens sinamics g120 • siemens sinamics g120c • siemens sinamics g120d • siemens sinamics g120p • siemens sinamics g130 • siemens sinamics g150 • siemens sinamics g180 • siemens sinamics s110 • siemens sinamics s120 • siemens sinamics s120cm • siemens sinamics s150

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References