Legacy Vivotek device firmware uses default credentials for root and user login accounts, creating a critical security vulnerability. This allows unauthenticated attackers to gain high-privilege access to affected devices. The vulnerability has a CVSS 4.0 score of 10, indicating maximum severity. No affected versions or patches are specified in the available data.