An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check and request updates. Thus attackers can man-in-the-middle a victim to download a malicious binary in place of the real update with no SSL errors or warnings.