That is an unintended vulnerability which can be exploited. While also bad it's not evidence of a malicious hardware installed before leaving the factory.