[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZGjbKTTywgT37Je5V81pCTAmwg4uUgdQKQeoOHL6OfQ":3,"g5a-risk:CVE-2016-8380":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":14,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":49,"references":50,"referencesCount":66,"weaknesses":67,"weaknessesCount":49,"isActivelyExploited":83,"cisaInfo":14,"otxData":14,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":123,"notableEvents":124},"CVE-2016-8380","What is CVE-2016-8380?","The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.","2018-04-05T16:29:00.33","2018-10-14T10:29:00.973",7.3,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":28,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.4,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":25,"ExploitabilityScore":35,"ImpactScore":36,"ACInsufInfo":4,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":33,"IntegrityImpact":33,"AvailabilityImpact":33,"BaseScore":34,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.10855,[37,37,37,37,37,37,37],"High",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"phoenixcontact","ilc_plcs_firmware","-","cpe:2.3:o:phoenixcontact:ilc_plcs_firmware:-:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":44,"criteria":48,"vulnerable":4},"ilc_plcs","cpe:2.3:h:phoenixcontact:ilc_plcs:-:*:*:*:*:*:*:*",2,[51,57,62],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F94163","Securityfocus",[55,56],"Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-313-01","Us-cert",[55,61],"US Government Resource",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45590\u002F","Exploit-db",[],3,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":75},"CWE-767","Access to Critical Private Variable via Public Method","The product defines a public method that reads or modifies a private variable.","If an attacker modifies the variable to contain unexpected values, this could violate assumptions from other parts of the code. Additionally, if an attacker can read the private variable, it may expose sensitive information or make it easier to launch further attacks.","Incomplete","Base",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2016-8380? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-8380, a high severity cyber security vulnerability from 2018. The web server in Phoenix Contact ILC PLCs allows access to ...","CVE-2016-8380, CVE-2016-8380 vulnerability, CVE-2016-8380 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, phoenixcontact security, ilc_plcs_firmware vulnerability, ilc_plcs vulnerability","\u002Fwhat-is\u002Fcve-2016-8380",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":9,"dateModified":10,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-8380","Cybersecurity","CVE-2016-8380, CVE-2016-8380 vulnerability, CVE-2016-8380 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":112,"Negate":14,"Nodes":113},"AND",[114,119],{"Operator":115,"Negate":14,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":118,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"D346044F-AA82-42FD-A882-C01280BD971D",{"Operator":115,"Negate":14,"CPEMatch":120},[121],{"Vulnerable":14,"Criteria":48,"MatchCriteriaID":122,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"28BCB419-3D9A-46AB-8B1F-8EBC67DE4E81",[],[125],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"fb8a0ab8-f26a-420e-8e3b-a478a99ed500","LOW_EPSS_DELTA","2026-04-01T14:23:07.305631+00:00","Daily EPSS score decreased by 0.118 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":133,"version":31},1792355942444,{"score":135,"band":136,"action":137,"scoredAt":138},49,"Medium","Plan remediation","2026-10-16T06:43:47.959268+00:00"]