DAQFactory plaintext transmission vulnerability

DAQFactory is a software and application development platform that provides a variety of tools that allow you to easily create HMI/SCADA applications. DAQFactory 18.1 Build 2347 and earlier versions are vulnerable to plaintext transmission. The vulnerability stems from the transmission of cookie information in plaintext over HTTP. An attacker could exploit the vulnerability by capturing network traffic to obtain a user’s cookie and take over an account.