Phoenix Contact ILC Plcs vulnerabilities

3 vulnerabilities

Known vulnerabilities in Phoenix Contact ILC Plcs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2016-8371phoenix contactphoenix contact ilc plcs+1
EPSS score
10.85%
The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.7.5CVE-2016-8380phoenix contactphoenix contact ilc plcs+1
EPSS score
10.85%
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.7.3CVE-2016-8366phoenix contactphoenix contact ilc plcs+1
EPSS score
5.71%
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.