CVE-2009-0216

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module.

• CWE-255

• http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=searchVendor Advisory
• http://www.kb.cert.org/vuls/id/310355US Government Resource
• http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/
• http://www.securityfocus.com/bid/33739
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48691
• http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=searchVendor Advisory
• http://www.kb.cert.org/vuls/id/310355US Government Resource
• http://www.mcgrewsecurity.com/2009/02/10/ge-fanuc-releases-info-on-ifix-vulnerabilities-vu-310355/
• http://www.securityfocus.com/bid/33739
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48691

Published

Feb 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0210Buffer overflow in the MLF application in AREVA e-terrahabit…
• CVE-2009-0211Unspecified vulnerability in the WebFGServer application in …
• CVE-2009-0212Unspecified vulnerability in the WebFGServer application in …
• CVE-2009-0213Unspecified vulnerability in the NETIO application in AREVA …
• CVE-2009-0214Unspecified vulnerability in the WebFGServer application in …
• CVE-2009-0215Stack-based buffer overflow in the GetXMLValue method in the…
• CVE-2009-0217The design of the W3C XML Signature Syntax and Processing (X…
• CVE-2009-0218Insecure method vulnerability in Particle Software IntraLaun…
• CVE-2009-0219The PDF distiller in the Attachment Service in Research in M…
• CVE-2009-0220Multiple stack-based buffer overflows in the PowerPoint 4.0 …
• CVE-2009-0221Integer overflow in Microsoft Office PowerPoint 2002 SP3 and…
• CVE-2009-0222Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3…