high7.3Public exploit code
CVE-2016-8366
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Phoenix Contact WebVisit 6.40.00 - Password Disclosure2018-10-11 · webapps · hardware
Impact
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Ilc Plcs Firmware | All versions |