Advisory (ICSA-16-313-01) from the Department of Homeland Security

The vulnerabilities were found on a Phoenix ILC150ETH PLC, but concerns all PLCs using a SPIDER web server. For more information feel free to contact me.

Advisory:

CVEs:

Thanks to Michael Kapfer for the evaluation the vulnerabilities and Phoenix Contacts for the great response.