VULNERABILITY INTELLIGENCE

CVE-2013-6920

CVSS score10 HIGH
EPSS probability3.23%
CISA KEVNot currently listed
Published2013-12-07
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Weakness classification

  • CWE-287: Improper Authentication

Primary references