Rayford Vaughn

**Name of the Vulnerable Software and Affected Versions** GE Fanuc iFIX versions 5.0 and earlier **Description** The issue involves a weakly encrypted local password file used for client-side authentication, allowing remote attackers to bypass access restrictions and start privileged server login sessions. This can be achieved by either recovering a password or using a modified program module. **Recommendations** For GE Fanuc iFIX versions 5.0 and earlier, consider implementing additional authentication mechanisms to strengthen access controls, and restrict access to the password file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.