A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.