The Hydrosystem Control System prior to version 9.8.5 logs sensitive information such as user credentials into log files, violating secure logging practices (CWE-532). This can enable attackers to retrieve credentials and escalate access within the system. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.9, indicating network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality. The issue is fixed in version 9.8.5, but no direct patch link or remediation advisory is provided in the input data.

An attacker who can access the log files may obtain sensitive user credentials, potentially allowing unauthorized access or privilege escalation within the Hydrosystem Control System. This could compromise system integrity and confidentiality. The vulnerability's impact is significant enough to warrant a medium severity rating but does not indicate direct remote code execution or system takeover by itself.

Upgrade the Hydrosystem Control System to version 9.8.5 or later, where this vulnerability has been fixed. Since no official patch link or advisory is provided, verify the upgrade path with the vendor. Patch status is not yet confirmed from the vendor advisory content in this data; check the vendor's official resources for current remediation guidance.