Phoenixcontact Ilc Plcs Firmware vulnerabilities

3 CVEs affecting Phoenixcontact Ilc Plcs Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8380, published 2018-04-05.

More from Phoenixcontact.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8380, published 2018-04-05. High severity, CVSS 7.3. EPSS: 10.9% chance of exploitation in the next 30 days. The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
• CVE-2016-8371, published 2018-04-05. High severity, CVSS 7.3. EPSS: 10.9% chance of exploitation in the next 30 days. The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.
• CVE-2016-8366, published 2018-04-05. High severity, CVSS 7.3. EPSS: 5.7% chance of exploitation in the next 30 days. Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a…