Siemens Sinamics S110 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Siemens Sinamics S110, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2013-6920siemenssinamics_g110+13
EPSS score
3.23%
Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.8.7CVE-2025-40833siemensie/pb link ha+242
EPSS score
0.32%
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.7.5CVE-2022-25622siemenssimatic_cfu_diq_firmware+76
EPSS score
0.90%
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.