Attackers could gain control over the pumps if they exploited the flaws, warns a security researcher