During configuration trnsmition password is sent on wire in weak encryption.
vulners.com/securityvulns/securityvulns:doc:3921
vulners.com/securityvulns/securityvulns:doc:4124