Multiple versions of Siemens SIMATIC suffer from a cross site request forgery vulnerability and poor cookie security settings.