I am almost certain no one has ever said "this attack vector was outside of penetration testing scope due to being rooted in the telnet protocol itself."