If it is possible to derive the 4byte NGID, since it possbily is related to the serial or maybe the wiiu leaks it through network packets, bruteforcing the other 6bytes wouldn't be too farfetched.
2^48 combinations = 281 trillion = ~5 days to bruteforce the remaining 6 bytes since plain-text...