ProSoft Technology ICX35 devices (models X35-HWC-A and ICX35-HWC-E) have a vulnerability in their integrated module web page where the login account lockout mechanism is implemented only in client-side JavaScript. This allows a remote attacker to bypass the lockout by deleting browser cookies, enabling continued brute-force password attempts. The issue is fixed in version 1.14.158.