The fact that users can access the network settings is 100% a bug. How can Cisco expect us to roll out Spark room kits with touch 10 interfaces on ce9, when users can physically change the IP address of the units...?
I have this issue too. Seems crazy. I've upgraded to ce9.1.2 but the issue is still there. This bug pretty much means we can't roll out any Spark Room Kits, as we cant have this level of vulnerability on our systems.
Anyone else facing this problem?