mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.