CVE-2016-8366

published 2018-04-05

CVE-2016-8366: Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user…

high 7.3 CVSS 3.0

AV N AC L PR N UI N S U C L I L A L

EXPLOIT

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phoenix_contact	phoenix_contact_ilc_plcs	—	—

CWE-312 CWE-255