SECURITY! Blue Iris can Login using Bad user/password!

[Sly11]

In Blue Iris I use Model RTSP H.264/MJPG/MPEG4 to connect to a IP2M-842 (latest and only firmware available, see below) and it successfully connect and show me the video of the camera while specifying ANY user/password combination...

Need CORRECTION ASAP, new Firmware!



Here's Blue Iris output of the "Inspect now..." button/feature.
Opening port 80...
HTTP request...
OK
GetCapabilities...
Response!
requesting device information
Manufacturer: General
Model: IP2M-842
FirmwareVersion: 2.212.General 00.2.R, build: 2016-01-24
has Media services: /onvif/media_service
has RTP/RTSP, requesting profiles
first profile is MediaProfile000
requesting URI for profile MediaProfile000
RTSP URI: /cam/realmonitor?channel=1&subtype=0&unicast=true&proto=Onvif
Done

[Sly11]

Anyone else can try this?