The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.
https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02
https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02