SMACom version 1.2.0 suffers from an insecure transit vulnerability that allows for password disclosure.