CVE-2013-6920: Siemens Sinamics g110

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Affected products

• Siemens Sinamics g110
• Siemens Sinamics g110d
• Siemens Sinamics g120
• Siemens Sinamics g120c
• Siemens Sinamics g120d
• Siemens Sinamics g120p
• Siemens Sinamics g130
• Siemens Sinamics g150
• Siemens Sinamics g180
• Siemens Sinamics S/g Family Firmware: up to and including 4.6
• Siemens Sinamics s110
• Siemens Sinamics s120
• Siemens Sinamics s120cm
• Siemens Sinamics s150

Published 2013-12-07. Last modified 2026-06-17.