It said someone within range of the device could access its video stream, either by working out the user's password, or entering the manufacturer's default password, 88888888, if it had not been changed.