Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf