Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and © device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or obtain operating-system access.