A specific administrative endpoint is accessible without proper authentication, exposing device management functions.