Even with these security holes, the cameras should be safe in a LAN environment, as one would need to bust through the firewall to get access to the cameras' IP addresses and ports (I think I'm correct here - please correct this if I'm wrong). Those addresses and ports on the firewall are never open by default. Changing the default password, of course, is still a very good idea.
The NVR/DVR devices are another story, though. But the security issues I'm reading of are about the cameras, not the NVRs. I don't know about any issues with these - having a strong password is certainly the first defense.