The CAREL pCOWeb firmware version 1.5.0 and lower has two passwordless default accounts that allow direct shell access via telnet. These accounts are not exposed in the associated Web UI. CAREL pCOWeb is an embedded device used primarily for HVAC systems.
82b0a4cd0a0bf41d1802335815e91ba3801340fe8352516154ac02cad97445f8