POC:
----

If you can login to unprivileged user account, you can download "/config.img" file. When you open it with a text editor, you are able to find Admin account's password.

Example:

```
<chain N="USERNAME_PASSWORD">
<V N="FLAG" V="0x0"/>
<V N="USERNAME" V="user"/>
<V N="PASSWORD" V="user"/>
<V N="PRIORITY" V="0x0"/>
</chain>
<chain N="USERNAME_PASSWORD">
<V N="FLAG" V="0x0"/>
<V N="USERNAME" V="secretUser"/>
<V N="PASSWORD" V="XXXXX"/>
<V N="PRIORITY" V="0x2"/>
</chain>
```