IP Camera Leaks Your Camera Feed to Anyone - And Also Your Home Wireless Network's Password in Plain Text

Tenvis JPT3815W camera shows your video to anyone without a password. It also reveals the password for accessing your wireless network in plain text. 

These exploits are not related to my previous report where devices shipped with default empty passwords. These exploits exist even with a secure password set. The need for a password is completely bypassed.

Setup Guide / Walkthrough of Tenvis JPT3815W 2013 IP Camera

UPDATE - 2014-06-30

*** There is a massive security vulnerability present in this camera ***

I will leave the rest of this review intact for posterity, but please read this warning before purchasing. 

Given the seriousness of this vulnerability, I would strongly recommend against buying this camera, or any others from Tenvis. 

Not until the company can prove they know how to build secure products and care about their users.

Please read this warning very closely if you already own this model, or any Tenvis camera.

Tenvis JPT3815W 2013

The Camera

Tenvis are a Chinese manufacturer whose product line includes IP Cameras, such as the model JPT3815W 2013 featured in this setup guide. Available to purchase online, this serves the budget-end of the IP Camera market. In fact, this camera currently has a selling price of less than £40. Tenvis offer a Global User Experience Improvment Program, which offers a free camera in return for writing guides to help other users. This camera was received through such a program.

View on Amazon.

However, any opinions expressed about the camera (good and bad) are entirely my own.

I became a member of the improvement program when I reported a security vulnerability to the company. They responded by thanking me for my report, and informed me they would work to fix the vulnerability immediately.

Read on for the full setup guide and review.