Siemens Sinamics G120C vulnerabilities

2 vulnerabilities

Known vulnerabilities in Siemens Sinamics G120C, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2013-6920siemenssinamics_g110+13
EPSS score
3.23%
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.8.7CVE-2025-40833siemensie/pb link ha+242
EPSS score
0.32%
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.