The issue described in the previous blog about Nurserycam has been present for a number of years. A direct connection is established to the DVR using admin credentials. This makes it trivial to for any parent to access any camera in the nursery and bypass the (ineffective) access restrictions. If you also reported an issue, please use the contact form on this page, or DM me on Twitter. I will not disclose any information you are not happy disclosing. The root cause on all of these reports is identical.”]
Source: https://cybergibbons.com/security-2/nurserycam-disclosure-timeline/