Is it on boarded to CnMaestro? There you can change the password via template.
Otherwise you have to default it and configure once again.
To avoid a truck roll you can try to send configuration default via snmp and then setup default AP to catch it again and reconfigure.
When on site you can default it via power sequence. To avoid a mast climbing.