It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.
CWE-200