Commands can be injected over the network and executed without authentication.
https://securityaffairs.com/167764/malware/corona-mirai-botnet-avtech-cctv-zero-day.html
https://www.darkreading.com/ics-ot-security/cctv-zero-day-targeted-by-mirai-botnet-campaign
https://www.securityweek.com/cisa-warns-of-avtech-camera-vulnerability-exploited-in-wild/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07
https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt