The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.