Google security engineer Billy Rios has publicly disclosed a remote authentication vulnerability in the Siemens Simatic software, which is used to control critical infrastructure systems worldwide.