Use your web server (or a reverse proxy like Nginx) to add an extra layer of Basic Authentication or a client certificate.
If you must expose it, change the web server port from 80/tcp to a random high port (e.g., 49155). This stops many automated scanners looking for :80/view/index.shtml. inurl view index shtml cctv top
Manufacturers release patches for known vulnerabilities. Check your brand’s support page quarterly. Use your web server (or a reverse proxy