Aspire-derived NEC PBXes including the SV8100 SV9100 SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid successfully authenticating account.