For similar coverage about finding barely-secured devices that shouldn't have ever even been connected to the Internet, check out the Security Now! podcast, episode 396 - The Telnet-pocalypse:

http://www.grc.com/securitynow.htm

Transcripts are available in several formats:

http://www.grc.com/sn/sn-396.htm

http://www.grc.com/sn/sn-396.txt

http://www.grc.com/sn/sn-396.pdf