CVE:CVE-2013-6920
CNNVD:CNNVD-201312-134
Siemens SINAMICS S/G controllers是德国西门子（Siemens）公司的一套用于机械工程及工厂建设中的变频器设备。
使用4.6及之前版本固件的Siemens SINAMICS S/G控制器中存在身份认证绕过漏洞，该漏洞源于FTP和TELNET会话没有执行身份验证操作。远程攻击者可利用该漏洞绕过既定的访问限制，执行管理员操作。
solution:Upgrade siemens sinamics_s/g_family_firmware to a higher version than 4.6,and avoid the version (,4.6]; Upgrade siemens sinamics_g110 to a higher version than -; Upgrade siemens sinamics_g110d to a higher version than -; Upgrade siemens sinamics_g120 to a higher version than -; Upgrade siemens sinamics_g120c to a higher version than -; Upgrade siemens sinamics_g120d to a higher version than -; Upgrade siemens sinamics_g120p to a higher version than -; Upgrade siemens sinamics_g130 to a higher version than -; Upgrade siemens sinamics_g150 to a higher version than -; Upgrade siemens sinamics_g180 to a higher version than -; Upgrade siemens sinamics_s110 to a higher version than -; Upgrade siemens sinamics_s120 to a higher version than -; Upgrade siemens sinamics_s120cm to a higher version than -; Upgrade siemens sinamics_s150 to a higher version than -