CVE-2016-8380

Summary

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

Affected Software

Weaknesses

• CWE-767: CWE-767: Access to Critical Private Variable via Public Method

ADP Enrichment

CVE Program Container

Additional References

• https://ics-cert.us-cert.gov/advisories/ICSA-313-01
• https://www.exploit-db.com/exploits/45590/
• http://www.securityfocus.com/bid/94163

References

• https://ics-cert.us-cert.gov/advisories/ICSA-313-01
• https://www.exploit-db.com/exploits/45590/
• http://www.securityfocus.com/bid/94163

• ←Previous
• Next→