Access SM remotely without having password

you could monitor their RF or ethernet traffic via the AP/LUID with SNMP. The community string is probably still set at Canopy. If the SM’s SNMP is set for read/write you could write changes to the SM via the AP. There are many ways of keeping tabs on this with the knowledge of their IP.

-Eric