DAQFactory man-in-the-middle attack vulnerability

DAQFactory is a software and application development platform that provides a variety of tools that allow you to easily create HMI/SCADA applications. DAQFactory 18.1 Build 2347 and earlier versions are vulnerable to a man-in-the-middle attack. An attacker could exploit the vulnerability to connect to the cloud, obtain credentials, and take over a user’s cloud account via a specially crafted project file.