A security lesson learned

Before deciding to leave the default password on a WiFi router unchanged (to avoid the hassle of remember the password later), be *extremely* sure the router's administration web server is only available from the wired interface.