Summary
The remote switch/routers uses the default password.
This means that anyone who has (downloaded) a user manual can telnet to it and gain administrative access.
Solution
telnet this switch/router and change all passwords (check the manual for default users)