A reset link is emailed to the console's administrator address. Anyone can request the link, but only whoever reads that inbox can act on it — so requesting one by itself can't take over the console.
Set a new console password (minimum 10 characters).