IRISPowerscan contains default user accounts with predictable credentials. An unauthenticated attacker with access to the affected installation could use these credentials to authenticate and gain unauthorized access to application functionality, potentially modifying data and configuration.