Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and users to be changed without authorization.
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor