« Volver al listado

CVE-2013-6920

Estado: ModificadaAlta (10)—

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (14)

Siemens — Sinamics G110Siemens — Sinamics G110dSiemens — Sinamics G120Siemens — Sinamics G120cSiemens — Sinamics G120dSiemens — Sinamics G120pSiemens — Sinamics G130Siemens — Sinamics G150Siemens — Sinamics G180Siemens — Sinamics S/G Family FirmwareSiemens — Sinamics S110Siemens — Sinamics S120Siemens — Sinamics S120cmSiemens — Sinamics S150

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6920",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-07T00:55:04.147",
  "references": [
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23."
    },
    {
      "lang": "es",
      "value": "Los controladores Siemens SINAMICS S/G con firmware anterior a 4.6.11 no requiere autenticación para sesiones FTP y TELNET, lo que permite a atacantes remotos evadir restricciones de acceso intencionadas a través de trafico TCP al puerto (1) 21 o (2) 23."
    }
  ],
  "lastModified": "2026-06-17T00:01:07.977",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:sinamics_s\\/g_family_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F15BC1E1-45E3-44F0-BD41-E7A73FB33662",
              "versionEndIncluding": "4.6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g110:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5ADF0BB-01FA-4FE4-BF4D-D33A6C5DAAFD"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g110d:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CE4257F-7262-4CC0-A874-374106B4B2C8"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61A60DCE-384B-43A4-A669-973FB8ECA932"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g120c:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "909DED2E-4CA6-4A07-B924-797260FDE2E4"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g120d:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75ED7DEA-67F8-4971-A076-79AF82026FD0"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g120p:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21FAA04F-FBE9-4EFA-BE79-1EAFF47A20D3"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "373DBE44-AC28-4D04-93BB-35CD8C60E899"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2296CA65-0E89-4BCB-8003-E7212BF1F585"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_g180:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC515520-BB04-4849-ACE8-87ED5D591454"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6218802E-D3B1-4197-A6B5-7343A50F7D88"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5A824BD-935F-4E53-8313-C5544B0489C7"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_s120cm:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0ECF745-CE82-42C6-9EA0-12FBD89F6220"
            },
            {
              "criteria": "cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D48682C-A39D-4A09-B904-50FA64A9D2A5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}