Is CVE-2013-6920 being actively exploited?

CVE-2013-6920 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2013-6920?

CVE-2013-6920 has a CVSS 2.0 base score of 10.0 (HIGH).

CVE-2013-6920

HIGH · CVSS 10.0EPSS 3.2%EU EUVD

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Key facts

CVSS score: 10.0 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-287
EPSS score: 3.2% (88th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2013-6721)
Published: December 7, 2013
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-6721 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

siemens / sinamics g110
siemens / sinamics g110d
siemens / sinamics g120
siemens / sinamics g120c
siemens / sinamics g120d
siemens / sinamics g120p
siemens / sinamics g130
siemens / sinamics g150
siemens / sinamics g180
siemens / sinamics s/g family firmware
siemens / sinamics s110
siemens / sinamics s120
siemens / sinamics s120cm
siemens / sinamics s150

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01(US Government Resource)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf(Vendor Advisory)
https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain