Specific firmware versions of Milesight AIOT cameras contain a critical security vulnerability where SSL certificates are configured with default private keys. This vulnerability allows attackers to potentially intercept and decrypt SSL/TLS communications by using the known default private keys. The issue affects multiple firmware versions of Milesight AIOT camera products and poses a significant risk to secure communications. Organizations using affected Milesight AIOT cameras should update their firmware immediately to versions that generate unique SSL certificates with proper private keys.