The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.
http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf
http://support.automation.siemens.com/WW/view/en/41929231/130000