Riskcovery

CVE-2016-8380

State
Published
Severity
Not scored
Published
Apr 5, 2018
Updated
Sep 16, 2024
Reserved
Sep 28, 2016

Read the record on cve.org

Description

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-767 Access to Critical Private Variable via Public Method

Affected Products

ProductVersions
Phoenix Contact ILC PLCsPhoenix Contact
  • All ILC 1xx PLCsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.