If you have a specific brand or model of an IP camera in mind, or if you're looking for a particular type of configuration (e.g., remote access, motion detection settings), providing more details could help in offering a more tailored response.
Some poorly coded IP camera viewers store client settings in cookies or URL parameters without encryption. An attacker performing a session replay could see your preferred resolution or audio codec — minor but revealing. intitle+ip+camera+viewer+intext+setting+client+setting
Security researchers use these queries to identify devices still using factory-default logins. Common defaults for the cameras found with this specific dork include: TP-Link & Zavio Intellinet Provision ISR Exploit-DB Security Warning If you have a specific brand or model
Exposing the client setting panel is generally safe because it only controls local playback. However, if the camera's web server allows unauthenticated access to that page, an attacker could: Security researchers use these queries to identify devices