The vulnerability isn't necessarily a "bug" in the software, but rather a failure of configuration. Many users set up their webcams for remote viewing but forget to: Set a Password