GoPro (Nasdaq: GPRO) is on watch Monday following a report that hackers could access the device and spy on the camera's owners.

According to the BBC, citing a report from Pen Test Partners, the cameras can be accessed by unwanted parties over a WiFi network. For the most part, Pen Test refers to how owners are using weak passwords when setting up the GoPro to be used over a WiFi network.

The cameras may also be still connected to the WiFi networks even after the device has been turned off, according to the report.

Pen Test also commented, The latest GoPro, version 4, has an extra layer of security. A bit like Bluetooth pairing, when you first connect to the camera over Wi-Fi, it requests a one-time code that is displayed on the GoPro screen. An excellent idea that should offer much better security. Except, once you’ve paired ONE mobile device with the tablet, it will talk to ANY Wi-Fi device. Yes, really. We were gobsmacked! This shouldn’t be possible – the pairing process should apply to each Wi-Fi device that you try to connect to it.

Shares of GoPro are flat in early trading Monday.