> Right - what I'm saying is the fact that there are default passwords at > all is horribly insecure, and that the vendor in question should be > prodded to change this dangerous practice.
How is that a risk in any way? Considering that one must have physical access to reset the unit to factory default, having physical access pretty much trumps any other security measure.