The vulnerability arose from how these cameras and their associated cloud servers handled the authentication during the QR code pairing process.
From QR to Compromise: How a Telegram Patch Saved Your IP Camera ip camera qr telegram patched