description: The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
problem types: CWE-767: Access to Critical Private Variable via Public Method
affected:
{
product: Phoenix Contact ILC PLCs
vendor: Phoenix Contact
versions:
status: affected, version: All ILC 1xx PLCs
}