Description
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.
Exploits (1)
exploitdb
WORKING POC
by Photubias · pythonwebappshardware
https://www.exploit-db.com/exploits/45586
Scores
CVSS v3
7.3
EPSS
0.0249
EPSS Percentile
85.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-312
CWE-255
Status
published
Products (1)
phoenixcontact/ilc_plcs_firmware
Published
Apr 05, 2018
Tracked Since
Feb 18, 2026