Let's assume that attacker knows verifier, so now he can commit MitM attack.
1) Client sends A to Server
2) MITM takes it and sends B to client
While MITM knows the verifier, he also can compute the secret key. So every message from client encrypted by that key is not safe. How to deal with that?
If you don't know what is A and B, please take a look at documentation.