It's possible to access web interface without username and password. Denial of Service.
vulners.com/securityvulns/securityvulns:doc:7873
vulners.com/securityvulns/securityvulns:doc:7874