CVE-2013-6920
First published: Sat Dec 07 2013(Updated: )
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Sinamics S\/g Family Firmware | <=4.6 | |
| Siemens Sinamics G110 | ||
| Siemens Sinamics G110d | ||
| Siemens Sinamics G120 | ||
| Siemens Sinamics G120c | ||
| Siemens Sinamics G120d | ||
| Siemens Sinamics G120p | ||
| Siemens Sinamics G130 | ||
| Siemens Sinamics G150 | ||
| Siemens Sinamics G180 | ||
| Siemens Sinamics S110 | ||
| Siemens Sinamics S120 | ||
| Siemens Sinamics S120cm | ||
| Siemens Sinamics S150 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/event
- agent/author
- agent/tags
- agent/weakness
- agent/type
- agent/severity
- agent/last-modified-date
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens sinamics s\/g family firmware
- version/siemens sinamics s\/g family firmware/4.6
- canonical/siemens sinamics g110
- canonical/siemens sinamics g110d
- canonical/siemens sinamics g120
- canonical/siemens sinamics g120c
- canonical/siemens sinamics g120d
- canonical/siemens sinamics g120p
- canonical/siemens sinamics g130
- canonical/siemens sinamics g150
- canonical/siemens sinamics g180
- canonical/siemens sinamics s110
- canonical/siemens sinamics s120
- canonical/siemens sinamics s120cm
- canonical/siemens sinamics s150