Alisa Esage Shevchenko

The issue allows local users to obtain sensitive information by reading a file due to the use of cleartext for project-window password storage.

The issue allows local users to obtain sensitive information by discovering a hardcoded cleartext password used to control read access to Project files and Project Configuration files.

The issue allows remote attackers to obtain access via a brute-force password-guessing attack, as the HMI user interface lists all valid usernames.

The issue allows remote attackers to obtain sensitive information by sniffing the network, as cleartext credentials are transmitted.