Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file.
vulners.com/securityvulns/securityvulns:doc:9466