CVE-2009-0216

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...

CVE-2009-0216

CVE-2009-0216 affects GE Fanuc iFIX 5.0 and earlier. The vulnerability arises from client-side authentication that stores passwords in a locally shared file, using weak encryption, enabling a remote attacker to recover credentials and bypass access controls to start privileged server login sessio...

GE Fanuc Proficy HMI/SCADA iFIX uses insecure authentication techniques

Overview Vulnerabilities in the way GE Fanuc iFIX handles authentication could allow a remote attacker to log on to the system with elevated privileges. Description GE Fanuc iFIX is SCADA client/server software that includes a Human Machine Interface HMI componant and runs on Microsoft Windows CE...