We thank Christian Fünfhaus from Deutsche Bahn CSIRT for identifying and reporting this issue

1 vulnerability record and advisories credit this contributor.