10
CVE-2013-6920
- EPSS 1.31%
- Published 07.12.2013 00:55:04
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Sinamics G110 Version-
Siemens ≫ Sinamics G110d Version-
Siemens ≫ Sinamics G120 Version-
Siemens ≫ Sinamics G120c Version-
Siemens ≫ Sinamics G120d Version-
Siemens ≫ Sinamics G120p Version-
Siemens ≫ Sinamics G130 Version-
Siemens ≫ Sinamics G150 Version-
Siemens ≫ Sinamics G180 Version-
Siemens ≫ Sinamics S110 Version-
Siemens ≫ Sinamics S120 Version-
Siemens ≫ Sinamics S120cm Version-
Siemens ≫ Sinamics S150 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.791 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.