CVE-2013-6920
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for...
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
Exploit likelihood
What each source reports
NVD Score used
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
- Record
CVE-2013-6920- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
- Record
CVE-2013-6920- Updated
- 2026-11-02
EUVDEUVD-2013-6721 No score
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
- Record
EUVD-2013-6721- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p6gr-96p8-25fw No score
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for...
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.
- Record
GHSA-p6gr-96p8-25fw- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- siemens sinamics g110
- siemens sinamics g110d
- siemens sinamics g120
- siemens sinamics g120c
- siemens sinamics g120d
- siemens sinamics g120p
- siemens sinamics g130
- siemens sinamics g150
- siemens sinamics g180
- siemens sinamics s110
- siemens sinamics s120
- siemens sinamics s120cm
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6920 is a high vulnerability (CVSS 10.0) in Siemens Sinamics G110, published December 7, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. No source names a fixed version.