SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated malicious user to download device configuration files via a crafted request.