It is actually the model of the AP... just a poor security implementation. Many vendors of gateways (modem/router combos) assume some ISP will use their hardware and that they will NOT use the reference code provided. (Un)fortunately, a lot do and the result is disgustingly insecure systems. This is already publicly known.
