Siemens Sinamics g150 vulnerabilities

2 CVEs affecting Siemens Sinamics g150, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40833, published 2026-05-12.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-6920, published 2013-12-07. High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days. Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP…
• CVE-2025-40833, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual…