CVE-2016-8366

2016-11-0800:00:00

CWE-312

icscert

www.cve.org

0.013 Low

EPSS

Percentile

85.7%

JSON

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.

CNA Affected

[
  {
    "product": "Phoenix Contact ILC PLCs",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "status": "affected",
        "version": "All ILC 1xx PLCs"
      }
    ]
  }
]