Smart home device vendor Wyze left an Elasticsearch production database unauthenticated, exposing the diagnostic parameters, camera telemetry fields, and emails of 2.4 million international users to scraping by scanning infrastructure.