Comment by danielh

The vulnerability is not in the front panel. It‘s the panel on the inside that accepts a code reset command without valid authentication.