Proving it for yourself is simple: Using a basic HTTP GET, fetch / / / / / / / / / / / / /etc/shadow from whichever IP address the dishwasher has on your network to reveal the shadow password file on its file system.