CVE-2016-8366
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.
- Score
- CVSS 3.0 7.3 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2018-04-05
- Last modified
- 2024-09-16
- Weaknesses
- CWE-255, CWE-312
Affected products
References
- http://www.securityfocus.com/bid/94163
- https://ics-cert.us-cert.gov/advisories/ICSA-313-01
- https://www.exploit-db.com/exploits/45586/
