Siemens Sinamics G120 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Siemens Sinamics G120, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-6920siemenssinamics_g110+13
EPSS score3.23%
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.CVE-2019-10936siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+139EPSS score2.07%
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.CVE-2019-10923siemenscp1604_firmware+110EPSS score1.40%
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.