CVE-2021-37400: Insufficiently Protected Credentials

An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded...