Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts.
https://possiblesecurity.com/news/vulnerabilities-of-milesight-ip-security-cameras/