Distributed Control System (DCS) has hard-coded passwords for local shell access
CVE-2022-30997
Programmable Logic Controller (PLC) has a maintenance service that uses undocumented, hard-coded credentials
CVE-2022-30314