
The rest are blanked out and have the Visitor privilege assigned by default.Īccording to Kennedy, if any of the eight user slots is left empty - with no username and password configured - it's possible to access the camera by simply hitting OK on the authentication prompt. The user administration interface has eight user ID fields, but only one of them is configured by default with user name "admin" and privilege Administrator.

Kennedy tracked down the problem to the software's user management system.įoscam MJPEG cameras support as many as eight separate user accounts with different privileges: Administrator, Operator and Visitor. A regular forum user and software developer named Don Kennedy who uses the nickname TheUberOverLord subsequently investigated the issue and concluded that other indoor and outdoor camera models from Foscam's MJPEG series have the same issue.
