An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.