Most network and Internet of Things devices (IoT) have default passwords. A default password is usually used to allow the device to be accessed during its initial setup, or after resetting to factory defaults. The biggest risk is the fact that default passwords are ready available. All you need is the model and manufacturer to easily find the default password on the internet. There are even lists of these passwords available to the public as a hacking or technical support resource.
Routers and IP cameras have recently been in the news a lot due to the risk of default passwords. Network switches, IP phones and many other devices have the same risk. Both commercial and consumer devices are at risk. Some manufacture requires that the default password is changed at setup.
At home, check your router and change the default password. At work, check IP cameras, network switch and other network devices.