Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.
CWE-1392