Zachary McGrew has discovered and reported that the FiWin SS28S WiFi VoIP SIP/Skype Phone with firmware version 01_02_07 has VxWorks Telnet open with a hardcoded user/pass of 1/1. Various debug commands enable viewing SIP credentials, WEP keys, etc. on the phone.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/50355/SS28S-WiFi.txt
Source: https://packetstormsecurity.com/files/50355/SS28S-WiFi.txt.html