In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application.