CVE-2016-8366

Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a way that the password is stored and transferred in clear text.

• CWE-312
• CWE-255

• http://www.securityfocus.com/bid/94163Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-313-01Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/45586/
• http://www.securityfocus.com/bid/94163Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-313-01Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/45586/

Published

Apr 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8360An issue was discovered in Moxa SoftCMS versions prior to Ve…
• CVE-2016-8361An issue was discovered in Lynxspring JENEsys BAS Bridge ver…
• CVE-2016-8362An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK…
• CVE-2016-8363An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK…
• CVE-2016-8364An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.1…
• CVE-2016-8365OSIsoft PI System software (Applications using PI Asset Fram…
• CVE-2016-8367An issue was discovered in Schneider Electric Magelis HMI Ma…5.3
• CVE-2016-8368An issue was discovered in Mitsubishi Electric Automation ME…8.6
• CVE-2016-8369An issue was discovered in Lynxspring JENEsys BAS Bridge ver…
• CVE-2016-8370An issue was discovered in Mitsubishi Electric Automation ME…7.5
• CVE-2016-8371The web server in Phoenix Contact ILC PLCs can be accessed w…
• CVE-2016-8372An issue was discovered in Moxa ioLogik E1210, firmware Vers…8.1