10
CVE-2013-6920
- EPSS 1.31%
- Veröffentlicht 07.12.2013 00:55:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Sinamics G110 Version-
Siemens ≫ Sinamics G110d Version-
Siemens ≫ Sinamics G120 Version-
Siemens ≫ Sinamics G120c Version-
Siemens ≫ Sinamics G120d Version-
Siemens ≫ Sinamics G120p Version-
Siemens ≫ Sinamics G130 Version-
Siemens ≫ Sinamics G150 Version-
Siemens ≫ Sinamics G180 Version-
Siemens ≫ Sinamics S110 Version-
Siemens ≫ Sinamics S120 Version-
Siemens ≫ Sinamics S120cm Version-
Siemens ≫ Sinamics S150 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.791 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.