Not a GOOD answer, but one that worked for me. Try a succession of obvious, easy passwords. All one digit, two pairs of digits,****,****,**** etc. Street address of location, last four of the phone numbers to the location, **** (straight down), four corners, all the small squares like ****, and all of these backwards. If you know the company that installed it, try their phone numbers. That's only a few hundred tries, and it goes pretty quick since there's no bad-try lockout. You can just hit Program****, and try one combo after another. You can try about 40 combos a minute. Last time I tried this, I hit it after about 6 minutes. Once you find it, go in and change it to something you know right away!
The other way, of course, is to do a complete default. I had to do that once when a previous truly paranoid tech had not only passworded it, but remapped the extensions so there was no extension ***
Edited because of Terms of Service agreement.