Security vulnerability on U.S. trains – known for 13 years