Cisco is still hard-coding passwords into its products

Static credentials with passwords written into a firewall's code. What could go wrong?