The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.