CVE-2016-8380 The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication

Description

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

Affected products and versions

Product	Affected versions	Fixed in
Phoenix Contact ILC PLCs	Versions not published

Other CVEs of Phoenix Contact ILC PLCs

The 3 CVEs of Phoenix Contact ILC PLCs →

CVE-2016-8366 Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or… Not rated CVE-2016-8371 The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism… Not rated