A security researcher says the default password shipped in a widely used door access control system allows anyone to easily and remotely access door locks and elevator controls in dozens of buildings across the U.S. and Canada.

Eric Daigle said he found exposed residential and office buildings across North America that have not yet changed their access control system’s default password, or are unaware that they should.