Vulnerabilities

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.

An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS.