CVE-2013-6920
First published: Sat Dec 07 2013(Updated: )
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SINAMICS s/g family firmware | <=4.6 | |
| Siemens SINAMICS G110 | ||
| Siemens SINAMICS G110D | ||
| Siemens SINAMICS G120 firmware | ||
| Siemens SINAMICS G120C | ||
| Siemens SINAMICS G120D | ||
| Siemens SINAMICS G120P | ||
| Siemens Sinamics G130 | ||
| Siemens Sinamics G150 Firmware | ||
| Siemens SINAMICS G180 | ||
| Siemens SINAMICS S110 firmware | ||
| Siemens Sinamics S120 Firmware | ||
| Siemens SINAMICS S120CM | ||
| Siemens SINAMICS S150 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-6920?
CVE-2013-6920 is classified as a high severity vulnerability due to the lack of authentication for FTP and TELNET sessions.
How do I fix CVE-2013-6920?
To fix CVE-2013-6920, users should upgrade to firmware version 4.6.11 or later for affected Siemens SINAMICS S/G controllers.
What devices are affected by CVE-2013-6920?
CVE-2013-6920 affects Siemens SINAMICS S/G controllers with firmware versions prior to 4.6.11, including models like G110, G120, and others.
What risks does CVE-2013-6920 pose to my system?
CVE-2013-6920 allows remote attackers to bypass access restrictions, potentially compromising system integrity and security.
Is there a workaround for CVE-2013-6920?
There are no documented workarounds for CVE-2013-6920; the recommended action is to update to the patched firmware.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens sinamics s/g family firmware
- version/siemens sinamics s/g family firmware/4.6
- canonical/siemens sinamics g110
- canonical/siemens sinamics g110d
- canonical/siemens sinamics g120 firmware
- canonical/siemens sinamics g120c
- canonical/siemens sinamics g120d
- canonical/siemens sinamics g120p
- canonical/siemens sinamics g130
- canonical/siemens sinamics g150 firmware
- canonical/siemens sinamics g180
- canonical/siemens sinamics s110 firmware
- canonical/siemens sinamics s120 firmware
- canonical/siemens sinamics s120cm
- canonical/siemens sinamics s150 firmware