The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check.
Credits
Souvik Kandar of Microsec (microsec.io) reported this vulnerability to CISA.
