Hey Tony,
As I understand it the S9 has an open API that will let anyone logon to it and change what they want if they can get on your network.  Typical from Shitmain, get behind a firewall and you should be good until those with more knowledge of this chime in and give you better/more detailed advice.
This is assuming you have an S9, not sure about the others but if one is open...