The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.CreditsAmir Preminger of Claroty reported these vulnerabilities to CISAReferenceshttps://us-cert.cisa.gov/ics/advisories/icsa-21-278-02