Phoenix Contact Ilc Plcs vulnerabilities

CVE-2016-8380 [HIGH] CWE-767 CVE-2016-8380: The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without aut The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

CVE-2016-8366 [HIGH] CWE-312 CVE-2016-8366: Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.

CVE-2016-8371 [HIGH] CWE-592 CVE-2016-8371: The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authen The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.