CVE-2014-9199: Inadequate Encryption Strength

The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic...