Delta UFC500 charging stations use a predictable method to generate default credentials for the Service account based on the device serial number. This allows an unauthenticated attacker with adjacent network access to reconstruct or brute-force the password. Successful exploitation enables reading and modifying sensitive settings, including the OCPP backend configuration.