VULNERABILITY INTELLIGENCE

CVE-2009-0216

CVSS score10 NONE
EPSS probability2.98%
CISA KEVNot currently listed
Published2009-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module.

Weakness classification

  • nvd@nist.gov: CWE-255

Primary references