CVE-2016-8371

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.

Score

CVSS 3.0 7.3 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-04-05

Last modified

2024-09-16

Weaknesses

CWE-287, CWE-592

Affected products

• Phoenix Contact Ilc Plcs (Phoenix Contact)
• Ilc Plcs Firmware (Phoenixcontact)

References

• http://www.securityfocus.com/bid/94163
• https://ics-cert.us-cert.gov/advisories/ICSA-313-01
• https://www.exploit-db.com/exploits/45590/