Cybersecurity agency issues warning about end-of-train device vulnerability