CVE-2016-8380 The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
HighCVSS 7.3
EPSS 10.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phoenixcontact ilc plcs firmware | All versions | No fix listed |
| Phoenix Contact ILC PLCs | = All ILC 1xx PLCs | No fix listed |
References
- 94163 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 45590 exploit