An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product.
CWE-798