The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic.Referenceshttps://ics-cert.us-cert.gov/advisories/ICSA-15-013-02
