What is the CVSS score of CVE-2013-6920?

CVE-2013-6920 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 1.2%.

Sinamics S G Family Firmware CVE-2013-6920

CRITICAL

Improper Authentication (CWE-287)

2013-12-07 cve@mitre.org

Siemens Authentication Bypass Sinamics S G Family Firmware Sinamics G110 Sinamics G110D Sinamics G120 Sinamics G120C Sinamics G120D Sinamics G120P Sinamics G130 Sinamics G150 Sinamics G180 Sinamics S110 Sinamics S120 Sinamics S120Cm Sinamics S150

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Dec 07, 2013 - 00:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23. Affected products include: Siemens Sinamics S\/G Family Firmware, Siemens Sinamics G110, Siemens Sinamics G110D, Siemens Sinamics G120, Siemens Sinamics G120C. Version information: before 4.6.11.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.