CVE-2013-6920

EPSS 3.24%
Veröffentlicht 07.12.2013 00:55:04
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Siemens ≫ Sinamics G110 Version -

Siemens ≫ Sinamics G110d Version -

Siemens ≫ Sinamics G120 Version -

Siemens ≫ Sinamics G120c Version -

Siemens ≫ Sinamics G120d Version -

Siemens ≫ Sinamics G120p Version -

Siemens ≫ Sinamics G130 Version -

Siemens ≫ Sinamics G150 Version -

Siemens ≫ Sinamics G180 Version -

Siemens ≫ Sinamics S110 Version -

Siemens ≫ Sinamics S120 Version -

Siemens ≫ Sinamics S120cm Version -

Siemens ≫ Sinamics S150 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.24%	0.866

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01

US Government Resource

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf

https://nvd.nist.gov/vuln/detail/CVE-2013-6920

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6920

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6920

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-6920