CVE-2016-8366 - AskarLabs CVE Database

CVE-2016-8366

Vendor Phoenix Contact

Product Phoenix Contact ILC PLCs

Weakness CWE-312 · Cleartext storage

Published April 5, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.

Key dates

02Disclosure timeline

April 5, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-8366 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/312.html

Related vulnerabilities

04Related CVE

CVE-2020-14480 CVE-2024-9432 Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica. CVE-2025-49728 Microsoft PC Manager Security Feature Bypass Vulnerability CVE-2023-6874 Zigbee Unauthenticated DoS via NWK Sequence number manipulation CVE-2025-54855 AutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information