Vulnerabilities in software from Schneider Electric

I found multiple vulnerabilities in software from Schneider Electric, used to monitor industrial monitoring devices. It reveals a very poor security design.

The editor was informed and I am waiting for its acknowledgement. I will disclose more details once the issues are patched.