Hardcoded root password xm123 in /sbin/init
Never update a production camera first. Clone the configuration, apply the firmware to an identical spare model on an isolated switch. Verify: network camera networkcamera patched