Google security engineer Billy Rios has publicly disclosed a remote authentication vulnerability in the Siemens SIMATIC software, which is used to control critical infrastructure systems worldwide.