Vivotek IP7137 Missing Authentication Vulnerability in Default Administrator Login

A vulnerability exists in the Vivotek IP7137 camera running firmware version 0200a, where the administrator login does not require a password by default. Although users can set a password, they are not notified of this requirement. This issue may affect all firmware versions, and since the product has reached its End-Of-Life phase, no fix is anticipated.

Impact

Exploitation of this vulnerability allows unauthorized access to the camera's administrative functions, potentially leading to further exploitation of other identified vulnerabilities in the same product.